[Dnsmasq-discuss] dnsmasq runs as root if setcap() fails

[Simon Kelley]

Bill C. Riemers wrote:

> 
> Do it in this order, but have the original process stay around listening
> to a pipe.   Then the steps become:
> 
> create a pipe
> fork to background
> fork helper
> do capset
> write to the pipe to tell the parent what exit status to use
> 
> If the pipe is closed with no status being sent, then we know to that an
> error occurred.

That's good. Actually it's an extension of some existing mechanism. I'll 
see what I can do.

I love this stuff, no problem is insoluble.


Cheers,

Simon.