084520690f
From version 0.88 mtr sends probes from a subprocess "mtr-packet", so that's what needs the privileged capabilities. Also, link with libcap which lets mtr-packet drop its privileges when they're no longer needed.
5 lines
77 B
Text
5 lines
77 B
Text
case "${ACTION}" in
|
|
post)
|
|
setcap CAP_NET_RAW+ep usr/bin/mtr-packet
|
|
;;
|
|
esac
|