Merge pull request #495 from matt-kimball/cygwin-async-pipe

[thirdparty/mtr.git] / SECURITY

diff --git a/SECURITY b/SECURITY
index f9127ac65f1335cb8b0218b74a5b99eb3bbdc196..3dae7e57d92cb4066370dc5b9b7d6e889f9d1cc9 100644 (file)
--- a/SECURITY
+++ b/SECURITY
@@ -35,7 +35,7 @@ minimal.
 3. Make mtr-packet a setuid-root binary.
 
 The mtr-packet binary can be made setuid-root, which is what "make install"
-does by default.
+does only if using setcap (above) fails.  Using setcap is tried first.
 
 When mtr-packet is installed as suid-root, some concern over security is
 justified.  mtr-packet does the following two things after it is launched:
@@ -44,6 +44,8 @@ justified.  mtr-packet does the following two things after it is launched:
    ICMP packets.
 *  mtr-packet drops root privileges by setting the effective uid to
    match uid or the user calling mtr.
+*  If capabilities support is available, mtr-packet drops all privileged
+   capabilities.
 
 See main() in packet.c and init_net_state_privileged() in probe_unix.c
 for the details of this process.