Re: [MERGE] Use libcap instead of direct linux capability syscalls

mån 2009-10-19 klockan 12:10 +1300 skrev Amos Jeffries:

> Um, is that function libcap2 specific?

Not sure when it was added. Checking... seems to be 2.09. Added to the
git repository Sat Mar 29 21:40:06 2008 -0700.

There is also a libcap-ng project these days, with yet another API..

> It may be related to the LIBCAP_BROKEN identifier or another such test
> for the specific function may be worth adding...

I rather have one code base than two here.. either libcap is used or it
is not. Using libcap if found working or raw syscalls if not does not
sound like a good idea to me.

But maybe we can require a reasonably current libcap-2 for TPROXY
support? It requires a custom kernel anyway on the systems with too old
libcap implementations I think.

Regards
Henrik
Received on Mon Oct 19 2009 - 23:04:31 MDT