summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorLeah Neukirchen <leah@vuxu.org>2020-05-15 20:37:06 +0200
committerLeah Neukirchen <leah@vuxu.org>2020-05-15 20:37:06 +0200
commitd823b09d9a68368459ad598d8bd8413a751950f2 (patch)
tree7516ad7189699545fc0b9c3d46e08a992713f8ab
parent1c152c32a2a5f302ba7596d8a415670f6a8f1a72 (diff)
downloadhittpd-d823b09d9a68368459ad598d8bd8413a751950f2.tar.gz
hittpd-d823b09d9a68368459ad598d8bd8413a751950f2.tar.xz
hittpd-d823b09d9a68368459ad598d8bd8413a751950f2.zip
explain how to run with CAP_NET_BIND_SERVICE
-rw-r--r--FEATURES5
1 files changed, 5 insertions, 0 deletions
diff --git a/FEATURES b/FEATURES
index c46a4e3..5524dd8 100644
--- a/FEATURES
+++ b/FEATURES
@@ -23,6 +23,11 @@ Anti features:
- No config files
- No CGI support
- No SSL, use behind hitch or the like
+- No setuid, if you want to bind to a low port, use (on Linux)
+
+ capsh --keep=1 --user=www-data \
+ --inh=cap_net_bind_service --addamb=cap_net_bind_service -- \
+ -c '/usr/local/bin/hittpd /srv/http'
Other nifty small webservers to look at: