From a65b033dafb93b4e3b37b1c0ce2deb6528582fd2 Mon Sep 17 00:00:00 2001 From: Roger Shimizu Date: Wed, 15 Feb 2017 08:27:17 +0900 Subject: [PATCH] Add CAP_NET_ADMIN capability to ss-redir in postinst script Fix #1252 --- debian/shadowsocks-libev.postinst | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/debian/shadowsocks-libev.postinst b/debian/shadowsocks-libev.postinst index df541d9ca..23461cbd7 100755 --- a/debian/shadowsocks-libev.postinst +++ b/debian/shadowsocks-libev.postinst @@ -22,7 +22,7 @@ case "$1" in configure|reconfigure) pathfind setcap && setcap \ cap_net_bind_service+ep /usr/bin/ss-local \ - cap_net_bind_service+ep /usr/bin/ss-redir \ + cap_net_bind_service,cap_net_admin+ep /usr/bin/ss-redir \ cap_net_bind_service+ep /usr/bin/ss-server \ cap_net_bind_service+ep /usr/bin/ss-tunnel if [ ! -f /etc/shadowsocks-libev/config.json ]; then