[Dnsmasq-discuss] warning: `dnsmasq' uses deprecated v2 capabilities in a way that may be insecure.

2008-06-19 Thread Simon Kelley
Posting here for googlers... It's come to my attention that running dnsmasq 2.42 under Linux kernel 2.6.25 (at least) causes the kernel to emit the message warning: `dnsmasq' uses deprecated v2 capabilities in a way that may be insecure. For dnsmasq, this is a redundant warning and should

Re: [Dnsmasq-discuss] dnsmasq runs as root if setcap() fails

2008-06-19 Thread Simon Kelley
Uwe Gansert wrote: On Thursday 19 June 2008, Simon Kelley wrote: our security team did a review of the dnsmasq package in openSUSE. This bug: https://bugzilla.novell.com/show_bug.cgi?id=401650 is maybe worth a discussion here. Hmm, can't get at that without a login, are there any other

Re: [Dnsmasq-discuss] dnsmasq runs as root if setcap() fails

2008-06-19 Thread Bill C. Riemers
Simon Kelley wrote: Carlos Carvalho wrote: Simon Kelley (si...@thekelleys.org.uk) wrote on 19 June 2008 19:53: The result of this is that if dnsmasq is going to exit because of capability problems, it can't return a non-zero exit code: starting the daemon will appear to start fine, and