mirror of
https://github.com/ZeroTier/ZeroTierOne
synced 2025-08-20 13:24:09 -07:00
Run as nonroot user on Linux (with CAP_NET_ADMIN and CAP_NET_RAW added).
- ZT will only drop root privileges if zerotier-one user exists. It is created by Debian postinst script - in other cases the user has to be created by administrator. - Linux >=4.3 with ambient capabilities is required, otherwise ZT will silently - "-U" option now also disables privileges dropping
This commit is contained in:
parent
88e3fe699c
commit
344a25c133
5 changed files with 197 additions and 3 deletions
9
osdep/LinuxDropPrivileges.hpp
Normal file
9
osdep/LinuxDropPrivileges.hpp
Normal file
|
@ -0,0 +1,9 @@
|
|||
#ifndef ZT_LINUXDROPPRIVILEGES_HPP
|
||||
#define ZT_LINUXDROPPRIVILEGES_HPP
|
||||
#include <string>
|
||||
|
||||
namespace ZeroTier {
|
||||
void dropPrivileges(std::string homeDir);
|
||||
}
|
||||
|
||||
#endif
|
Loading…
Add table
Add a link
Reference in a new issue