socket-default: Require CAP_NET_BIND_SERVICE for ports < 1024

Since we don't know which ports are used with socket-dynamic we can't demand the capability there, but it might still be required.
2013-06-25 17:16:32 +02:00
parent 41b8546ac0
commit 1dd61bf13d
2 changed files with 16 additions and 1 deletions
@@ -32,8 +32,11 @@ typedef struct capabilities_t capabilities_t;
 # include <linux/capability.h>
 #endif

+#ifndef CAP_NET_BIND_SERVICE
+# define CAP_NET_BIND_SERVICE 10
+#endif
 #ifndef CAP_NET_ADMIN
-#define CAP_NET_ADMIN 12
+# define CAP_NET_ADMIN 12
 #endif

 /**