[Dnsmasq-discuss] Starting as non-root

Kristoffel Pirard kristoffel.pirard at gmail.com
Mon May 13 09:31:42 BST 2019


Hi there,

The dnsmasq man page for the --user parameter says that "Dnsmasq must
_normally_ be started as root".  We tested starting as non-root user, but
with capabilities cap_net_bind_service, cap_net_admin, cap_net_raw.  It
currently seems to work, but I'm debating if we should actually use this
'hack'.

So should the ambiguous adverb 'normally' be removed from the
documentation?  If not, what are the circumstances in which it is allowed
to not start as root?

Kind regards,
Kristoffel
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/attachments/20190513/f6d695bf/attachment.html>


More information about the Dnsmasq-discuss mailing list