[Dnsmasq-discuss] dnsmasq runs as root if setcap() fails
simon at thekelleys.org.uk
Thu Jun 19 21:50:09 BST 2008
Bill C. Riemers wrote:
> Do it in this order, but have the original process stay around listening
> to a pipe. Then the steps become:
> create a pipe
> fork to background
> fork helper
> do capset
> write to the pipe to tell the parent what exit status to use
> If the pipe is closed with no status being sent, then we know to that an
> error occurred.
That's good. Actually it's an extension of some existing mechanism. I'll
see what I can do.
I love this stuff, no problem is insoluble.
More information about the Dnsmasq-discuss