Run as nonroot user on Linux (with CAP_NET_ADMIN and CAP_NET_RAW added).

- ZT will only drop root privileges if zerotier-one user exists. It is created by
Debian postinst script - in other cases the user has to be created by administrator.
- Linux >=4.3 with ambient capabilities is required, otherwise ZT will silently
- "-U" option now also disables privileges dropping
This commit is contained in:
Michał Zieliński 2016-10-16 13:35:29 +02:00
commit 344a25c133
5 changed files with 197 additions and 3 deletions

View file

@ -0,0 +1,9 @@
#ifndef ZT_LINUXDROPPRIVILEGES_HPP
#define ZT_LINUXDROPPRIVILEGES_HPP
#include <string>
namespace ZeroTier {
void dropPrivileges(std::string homeDir);
}
#endif