Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove broken options runoptions.uid and runoptions.gid #5261

Merged
merged 2 commits into from Sep 28, 2017

Conversation

@tsg
Copy link
Collaborator

commented Sep 28, 2017

These were meant to allow dropping privileges in Packetbeat, but they no longer
worked for a good while (since Golang 1.4). As shown in #3542, a better way
of running Packetbeat as a non-root user is to use capabilities:

setcap cap_net_raw,cap_net_admin=eip packetbeat

Closes #3542.

Remove broken options runoptions.uid and runoptions.gid
These were meant to allow dropping privileges in Packetbeat, but they no longer
worked for a good while (since Golang 1.4). As shown in #3542, a better way
of running Packetbeat as a non-root user is to use capabilities:

    setcap cap_net_raw,cap_net_admin=eip packetbeat

Closes #3542.
@ruflin
ruflin approved these changes Sep 28, 2017
Copy link
Collaborator

left a comment

WFG

@ruflin ruflin merged commit 9a3ab3f into elastic:master Sep 28, 2017

1 of 4 checks passed

beats-ci Build finished.
Details
continuous-integration/appveyor/pr Waiting for AppVeyor build to complete
Details
continuous-integration/travis-ci/pr The Travis CI build is in progress
Details
CLA Commit author is a member of Elasticsearch
Details
tsg added a commit to tsg/beats that referenced this pull request Oct 3, 2017
Remove broken options runoptions.uid and runoptions.gid (elastic#5261)
These were meant to allow dropping privileges in Packetbeat, but they no longer
worked for a good while (since Golang 1.4). As shown in elastic#3542, a better way
of running Packetbeat as a non-root user is to use capabilities:

    setcap cap_net_raw,cap_net_admin=eip packetbeat

Closes elastic#3542.

(cherry picked from commit 9a3ab3f)

@tsg tsg removed the needs_backport label Oct 3, 2017

ruflin added a commit that referenced this pull request Oct 4, 2017
Remove broken options runoptions.uid and runoptions.gid (#5261) (#5309)
These were meant to allow dropping privileges in Packetbeat, but they no longer
worked for a good while (since Golang 1.4). As shown in #3542, a better way
of running Packetbeat as a non-root user is to use capabilities:

    setcap cap_net_raw,cap_net_admin=eip packetbeat

Closes #3542.

(cherry picked from commit 9a3ab3f)
ramon-garcia added a commit to ramon-garcia/beats that referenced this pull request Dec 5, 2017
Remove broken options runoptions.uid and runoptions.gid (elastic#5261)
These were meant to allow dropping privileges in Packetbeat, but they no longer
worked for a good while (since Golang 1.4). As shown in elastic#3542, a better way
of running Packetbeat as a non-root user is to use capabilities:

    setcap cap_net_raw,cap_net_admin=eip packetbeat

Closes elastic#3542.
athom added a commit to athom/beats that referenced this pull request Jan 25, 2018
Remove broken options runoptions.uid and runoptions.gid (elastic#5261)
These were meant to allow dropping privileges in Packetbeat, but they no longer
worked for a good while (since Golang 1.4). As shown in elastic#3542, a better way
of running Packetbeat as a non-root user is to use capabilities:

    setcap cap_net_raw,cap_net_admin=eip packetbeat

Closes elastic#3542.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
2 participants
You can’t perform that action at this time.