[arch-general] nsd 4.3.5 broken

[Genes Lists]

On 2/6/21 12:03 PM, Geo Kozey via arch-general wrote:
>> ----------------------------------------
>> From: Archange via arch-general <arch-general at lists.archlinux.org>
>...
>>>>    nsd[10230]: setsockopt(..., IP_TRANSPARENT, ...) failed for tcp:
>>>> Operation not permitted
>>
>> So if you use this option (IP_TRANSPARENT), which is non-default, you
...
> I disagree with downstream hardening efforts that limit app features (even when
..
> G. K.
> 

Yes i am using ip-transparent - this is pretty helpful option to avoid 
non-starting when network unavailable for some reason.

I would also prefer that CAP_NET_ADMIN be added as default config.

thanks.