[Dnsmasq-discuss] dnsmasq runs as root if setcap() fails

Simon Kelley simon at thekelleys.org.uk
Thu Jun 19 21:50:09 BST 2008

Bill C. Riemers wrote:

> Do it in this order, but have the original process stay around listening
> to a pipe.   Then the steps become:
> create a pipe
> fork to background
> fork helper
> do capset
> write to the pipe to tell the parent what exit status to use
> If the pipe is closed with no status being sent, then we know to that an
> error occurred.

That's good. Actually it's an extension of some existing mechanism. I'll 
see what I can do.

I love this stuff, no problem is insoluble.



More information about the Dnsmasq-discuss mailing list