]> git.ipfire.org Git - thirdparty/haproxy.git/commitdiff
MINOR: startup: adjust alert messages, when capabilities are missed
authorValentine Krasnobaeva <vkrasnobaeva@haproxy.com>
Fri, 7 Mar 2025 12:42:27 +0000 (13:42 +0100)
committerWilly Tarreau <w@1wt.eu>
Fri, 7 Mar 2025 15:37:16 +0000 (16:37 +0100)
CAP_SYS_ADMIN support was added, in order to access sockets in namespaces. So
let's adjust the alert at startup, where we check preserved capabilities from
global.last_checks. Let's mention here cap_sys_admin as well.

src/haproxy.c

index 8804d0529b9a1174e00be62a95305b4039e33501..0b36e230f4443352fd5d721e91c3751ad7d2ff03 100644 (file)
@@ -3438,8 +3438,8 @@ int main(int argc, char **argv)
 #if defined(USE_LINUX_CAP)
                        ha_alert("[%s.main()] Alternately, if your system supports "
                                 "Linux capabilities, you may also consider using "
-                                "'setcap cap_net_raw' or 'setcap cap_net_admin' in the "
-                                "'global' section.\n", argv[0]);
+                                "'setcap cap_net_raw', 'setcap cap_net_admin' or "
+                                "'setcap cap_sys_admin' in the 'global' section.\n", argv[0]);
 #endif
                        protocol_unbind_all();
                        exit(1);