This is an automated email from the ASF dual-hosted git repository. shinrich pushed a commit to branch avx-53179 in repository https://gitbox.apache.org/repos/asf/trafficserver.git
commit 39860c2d9a3760740f3e1d2342a604b248da3164 Author: Susan Hinrichs <[email protected]> AuthorDate: Tue May 7 10:54:30 2024 -0500 AVX-43612: Preserve CAP_NET_RAW on startup (#121) --- src/tscore/ink_cap.cc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/tscore/ink_cap.cc b/src/tscore/ink_cap.cc index 9b28428400..6944e007e3 100644 --- a/src/tscore/ink_cap.cc +++ b/src/tscore/ink_cap.cc @@ -266,7 +266,7 @@ RestrictCapabilities() cap_t caps_orig = cap_get_proc(); // Capabilities we need. - cap_value_t perm_list[] = {CAP_NET_ADMIN, CAP_NET_BIND_SERVICE, CAP_IPC_LOCK, CAP_DAC_OVERRIDE, CAP_FOWNER}; + cap_value_t perm_list[] = {CAP_NET_ADMIN, CAP_NET_BIND_SERVICE, CAP_IPC_LOCK, CAP_DAC_OVERRIDE, CAP_FOWNER, CAP_NET_RAW}; static int const PERM_CAP_COUNT = sizeof(perm_list) / sizeof(*perm_list); cap_value_t eff_list[] = {CAP_NET_ADMIN, CAP_NET_BIND_SERVICE, CAP_IPC_LOCK}; static int const EFF_CAP_COUNT = sizeof(eff_list) / sizeof(*eff_list);
