]> git.ipfire.org Git - thirdparty/pdns.git/commit
dnsdist: Document that eBPF socket filtering requires `CAP_SYS_ADMIN` 14280/head
authorRemi Gacogne <remi.gacogne@powerdns.com>
Tue, 4 Jun 2024 14:24:13 +0000 (16:24 +0200)
committerRemi Gacogne <remi.gacogne@powerdns.com>
Tue, 4 Jun 2024 14:24:13 +0000 (16:24 +0200)
commit12f2bc6e8c182e0ac0f9b256907f839da8ceb162
tree34dcb5721743968c79c516f24d1daef7475c40bb
parent0c56c3262c29d104cdc3a2706424da8802698388
dnsdist: Document that eBPF socket filtering requires `CAP_SYS_ADMIN`

We used to be able to use only `CAP_BPF` since kernel 5.8, but the
eBPF verifier has been made more strict a few versions later and we
now require `CAP_SYS_ADMIN` again.
pdns/dnsdistdist/docs/advanced/ebpf.rst
pdns/dnsdistdist/docs/reference/config.rst