Hello Kamil, Am 05.09.2017 um 05:04 schrieb Kamil Jońca: > kjo...@poczta.onet.pl (Kamil Jońca) writes: > >> Russ Allbery <r...@debian.org> writes: >> >>> kjo...@poczta.onet.pl (Kamil Jońca) writes: >>> >>>> Hm. I tried to add >>> >>>> AmbientCapabilities=CAP_NET_ADMIN CAP_NET_RAW CAP_NET_BIND_SERVICE > > It was my fault. > I used > #setcap "" /usr/sbin/freeradius > > but I should > #setcap -r /usr/sbin/freeradius > > Now all works as expected.
could you please add your information about the changes to the wiki please? Maybe a now paragraph on the Hardening site? I'm not sure if this is the right place for this but content can be moved anyways later. https://wiki.debian.org/Hardening -- Regards Carsten Schoenert
