]> git.kaiwu.me - nginx.git/commit
Retain CAP_NET_RAW capability for transparent proxying.
authorRoman Arutyunyan <arut@nginx.com>
Wed, 13 Dec 2017 17:40:53 +0000 (20:40 +0300)
committerRoman Arutyunyan <arut@nginx.com>
Wed, 13 Dec 2017 17:40:53 +0000 (20:40 +0300)
commit752f66bf7d70fae2bf05fbf5941ff4be52b2b9a5
tree78fc3bcc2f52d8fc71fa4ec12080fdf891e0a113
parentd2d737e70b46429ef9ed71b99402a9151f3c2e1f
Retain CAP_NET_RAW capability for transparent proxying.

The capability is retained automatically in unprivileged worker processes after
changing UID if transparent proxying is enabled at least once in nginx
configuration.

The feature is only available in Linux.
auto/os/linux
src/core/ngx_cycle.h
src/http/ngx_http_upstream.c
src/os/unix/ngx_linux_config.h
src/os/unix/ngx_process_cycle.c
src/stream/ngx_stream_proxy_module.c