Package: dnsmasq
Version: 2.45-1
Severity: important

If setcap() call at startup fail (for example, under
OpenVZ), dnsmasq reports an error and do not start:

# /etc/init.d/dnsmasq start
Starting DNS forwarder and DHCP server: dnsmasq
dnsmasq: setting capabilities failed: Operation not permitted
failed (warning).
 failed!
#

in strace the error is:
capset(0x19980330, 0, {CAP_SETUID|CAP_NET_ADMIN|CAP_NET_RAW, 
CAP_SETUID|CAP_NET_ADMIN|CAP_NET_RAW, CAP_SETUID|CAP_NET_ADMIN|CAP_NET_RAW}) = 
-1 EPERM (Operation not permitted)

I think it should only warn about error and continue to
work. Different security solutions is quite popular and some
of them will not allow something that works on plain unix.
It's better to be tolerant to such failures.

I did not found how to fix it in configuration.

-- System Information:
Debian Release: lenny
Architecture: i386

Kernel: Linux 2.6.18-92.1.13.el5.028stab059.3PAE
Locale: LANG=C
Shell: /bin/sh linked to /bin/bash

Versions of packages dnsmasq depends on:
ii  adduser                       3.110      add and remove users and groups
ii  dnsmasq-base                  2.45-1     A small caching DNS proxy and DHCP
ii  netbase                       4.34       Basic TCP/IP networking system

dnsmasq recommends no packages.

Versions of packages dnsmasq suggests:
pn  resolvconf                    <none>     (no description available)

-- no debconf information



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to