libcap support: print out process capabilities at startup if verbose

This commit is contained in:
Yves Rutschle committed 2014-02-09 21:39:27 +01:00
1 parent 2d3b6c4abd
commit 6bcb5c83f2
4 files changed
+33 -5

No files matched your search

+6
View File
@@ -5,6 +5,12 @@ vNEXT:
first incoming packet.
(Ondrej Kuzník)
Libcap support: Keep only CAP_NET_ADMIN if started
as root with transparent proxying and dropping
priviledges (enable USELIBCAP in Makefile). This
avoids having to mess with filesystem capabilities.
(Sebastian Schmidt/yath)
Fixed bugs related to getpeername that would cause
sslh to quit erroneously (getpeername can return
actual errors if connections are dropped before