On Saturday 19 November 2005 19:00, oliver oli wrote:
> hi,
>
> i cannot run asterisk as non-root user.

To open a lapd socket vISDN requires the CAP_NET_BIND_SERVICE capability. This 
requirement is needed because opening a lapd socket is a privileged 
operation, as, otherwise, any user could place or intercept calls, etc..

Unfortunately, Asterisk misses a way for the modules to reserve privileged 
resources before dropping privileges.

So, the answer is that you have to run Asterisk as root, or at least with the 
CAP_NET_BIND_SERVICE capability. If you're going to say that it sucks, yes, 
it sucks, but it is my opinion that it asterisk who should provide that 
feature.

Anyway, I'm not going to live with this flaw forever, before vISDN is becoming 
"production" level I will find some solution.

Bye,

-- 
  Daniele Orlandi
_______________________________________________
Visdn-hackers mailing list
[email protected]
https://mailman.uli.it/mailman/listinfo/visdn-hackers

Reply via email to