6 Feb
2021
6 Feb
'21
5:09 p.m.
On 2/6/21 12:03 PM, Geo Kozey via arch-general wrote:
---------------------------------------- From: Archange via arch-general <arch-general@lists.archlinux.org> ...
nsd[10230]: setsockopt(..., IP_TRANSPARENT, ...) failed for tcp: Operation not permitted
So if you use this option (IP_TRANSPARENT), which is non-default, you ... I disagree with downstream hardening efforts that limit app features (even when .. G. K.
Yes i am using ip-transparent - this is pretty helpful option to avoid non-starting when network unavailable for some reason. I would also prefer that CAP_NET_ADMIN be added as default config. thanks.