]> git.ipfire.org Git - thirdparty/man-pages.git/commit
man/man7/ip.7: Document capabilities to use IP_TRANSPARENT
authorMatthieu Buffet <matthieu@buffet.re>
Fri, 7 Mar 2025 22:22:44 +0000 (23:22 +0100)
committerAlejandro Colomar <alx@kernel.org>
Sun, 9 Mar 2025 00:00:38 +0000 (01:00 +0100)
commit0c1e05eb27abb5e8ed2aafca1af064e13867165a
tree436f9994e5b636a75ca3437c205c0dce9b396924
parent64199c5bf76806f13a78b9fd5792ccfcb28a5551
man/man7/ip.7: Document capabilities to use IP_TRANSPARENT

CAP_NET_ADMIN has been overkill to use setsockopt(IP_TRANSPARENT)
since a discussion on LKML[1] and a patch[2] in 2011.  All that is
left to do is to let devs know they don't need CAP_NET_ADMIN.

[2] linux.git 6cc7a765c298 (2011-10-20; "net: allow CAP_NET_RAW to set socket options IP{,V6}_TRANSPARENT")

Link: [1] <https://lore.kernel.org/netdev/20111020.182214.629562655202957174.davem@davemloft.net/T/>
Signed-off-by: Matthieu Buffet <matthieu@buffet.re>
Message-ID: <20250307222244.597006-1-matthieu@buffet.re>
Signed-off-by: Alejandro Colomar <alx@kernel.org>
man/man7/ip.7