sniproxy icon indicating copy to clipboard operation
sniproxy copied to clipboard
verified publisher icon dlundquist

Capabilities support

Open dlundquist opened this issue 8 years ago • 0 comments

Use capabilities rather than root privileges. This came out of the transparent proxy work (#179), but may subsume the binder module as well.

  • [x] Use CAP_NET_RAW so we can drop root privileges when in transparent mode
  • [ ] If capabilities are available use CAP_NET_BIND_SERVICE instead of binder module
  • [ ] Leave binder module as fallback for non-Linux operating systems

dlundquist avatar Feb 18 '17 04:02 dlundquist