]> git.ipfire.org Git - thirdparty/squid.git/commit
Set cap_net_admin capability when Squid sets TOS/Diffserv packet values.
authorChristos Tsantilas <chtsanti@users.sourceforge.net>
Thu, 22 Jan 2015 11:02:31 +0000 (13:02 +0200)
committerChristos Tsantilas <chtsanti@users.sourceforge.net>
Thu, 22 Jan 2015 11:02:31 +0000 (13:02 +0200)
commit4a751e2a553f08d8e50969f2427beff40a7fc760
tree80982528735466ff891af0f655578c1e1d539971
parent5c634111f4ab8498699c0edc649204ca0c38a4cb
Set cap_net_admin capability when Squid sets TOS/Diffserv packet values.

In capabilities-capable environments (e.g., Linux with libcap), CAP_NET_ADMIN
capability is required to honor clientside_tos and tcp_outgoing_tos
directives. The code was setting that capability when Netfilter marks or
tproxy was enabled, but missed the clientside_tos and tcp_outgoing_tos cases.

This is a Measurement Factory project
src/tools.cc