Re: [Ltib] setcap/libcap2?

[Stuart Hughes]

Hi Tom,

If you really want libcap, you'll need to port that to LTIB.  However, I 
wouldn't  necessarily advised doing that.  IMHO it might be better to 
start the server as root and then immediately after binding have it 
demote it's privileges to 'nobody'.  IIRC this is the approach that most 
daemons take.

Regards, Stuart

Morrison, Tom wrote:
> here is what the man page says:
>    http://man-wiki.net/index.php/8:setcap
>  
> Essentially, I am trying to run a webserver as 'non-root' 
> (and bind 'priviledged ports to this 'non-root' process)...
>  
>    http://tinyurl.com/dm9sbg
>
> We have tried some of the other methods, and they aren't
> working for this webserver (tomcat) application
>  
> t
>  
> ________________________________
>
> From: Stuart Hughes [mailto:address@hidden
> Sent: Wed 4/22/2009 4:04 AM
> To: Morrison, Tom
> Cc: address@hidden
> Subject: Re: [Ltib] setcap/libcap2?
>
>
>
> Hi Tom,
>
> I've not come across that executable.  The closest thing I can find is
> 'setpcaps' in libcap-bin (Debian), but I'm not sure if this is the one
> you mean.  What you need to do is to locate the package containing the
> executable you want and then add that package to LTIB.
>
> Regards, Stuart
>
> Morrison, Tom wrote:
> > I am running a LTIB version from Freescale: ltib-mpc8572ds-20081218
> >
> >
> >
> > I have a program I am porting to this rootfs that requires the tool: setcap
> >
> > which it looks like comes from a package called libcap2. Is there a library
> >
> > and/or package I am missing that will contains this functionality?
> >
> >
> >
> > I am really behind an eight ball on this one...L
> >
> >
> >
> > **Tom Morrison**
> > Principal Software Engineer
> >
> > **EMPIRIX**
> > 20 Crosby Drive *-* Bedford, MA* * 01730
> > *p:* 781.266.3567 *f:* 781.266.3670 *
> > **email:* address@hidden <mailto:address@hidden>_
> > www.empirix.com <http://www.empirix.com/>
> >
> >
> >
> >
> >
> > ------------------------------------------------------------------------
> >
> > _______________________________________________
> > LTIB home page: http://bitshrine.org <http://bitshrine.org/> 
> >
> > Ltib mailing list
> > address@hidden
> > http://lists.nongnu.org/mailman/listinfo/ltib