Subject: Re: setsockopt(IP_TOS) being privileged or distinct capability?

From: Alexander Clouter <[email-masked]>
Date: Sat, 3 Jul 2010 19:55:30 +0100

Philip Prindeville <[email-masked]> wrote:
>
> Does anyone else think that setsockopt(IP_TOS) should be a privileged 
> operation, perhaps using CAP_NET_ADMIN, or maybe even adding separate 
> granularity as CAP_NET_TOS?
> 
I really would prefer not having to run telnet and ssh *clients* as 
root. :)

Cheers

-- 
Alexander Clouter
.sigmonster says: Someday your prints will come.
                  		-- Kodak