Add CAP_NET_ADMIN capability to ss-redir in postinst script

Fix shadowsocks#1252
rogers0 · Feb 14, 2017 · a65b033 · a65b033
1 parent 80ca946
commit a65b033
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/debian/shadowsocks-libev.postinst b/debian/shadowsocks-libev.postinst
@@ -22,7 +22,7 @@ case "$1" in
 	configure|reconfigure)
 		pathfind setcap && setcap \
 			cap_net_bind_service+ep /usr/bin/ss-local \
-			cap_net_bind_service+ep /usr/bin/ss-redir \
+			cap_net_bind_service,cap_net_admin+ep /usr/bin/ss-redir \
 			cap_net_bind_service+ep /usr/bin/ss-server \
 			cap_net_bind_service+ep /usr/bin/ss-tunnel
 		if [ ! -f /etc/shadowsocks-libev/config.json ]; then