Setting Linux Capabilities

Ravi Paluri (QUIC) quic_rpaluri at quicinc.com
Tue Aug 16 04:49:30 PDT 2022


Hi Team,
    We would like to set below capabilities for our process.
* CAP_NET_ADMIN 
* CAP_NET_RAW

Do we need to use APIs mentioned in https://linux.die.net/man/3/cap_set_flag and https://linux.die.net/man/3/cap_set_proc to get this functionality?

On Systemd, I see that this can be achieved by writing below lines in a service file.
CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_RAW
AmbientCapabilities=CAP_NET_ADMIN CAP_NET_RAW

So, would like to know if there is any thing similar that can be done in procd init scripts?

Thanks,
Ravi




More information about the openwrt-devel mailing list