[TS-338] Use POSIX capabilities instead of user ID switching.

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.0.0
• Fix Version/s: 2.1.1
• Component/s: Security
• Labels: capabilities privileges root security seteuid
• Assignee: Mladen Turk
• Reporter: Alan M. Carroll
• Created: 06/May/10 16:55
• Updated: 02/May/13 02:29
• Resolved: 28/May/10 18:00

Description

Instead of switching the user id around (via seteuid() and the like), use POSIX capabilities to retain the appropriate privileges as a non-root user.

This will have to be done as an optional feature because while modern Linux kernels are compliant, older kernels may not be and the compliance status of other operating systems (e.g. BSD) is unclear.

Issue Links

• is depended upon by: TS-291 Enable transparent forward proxying