summary refs log tree commit diff
diff options
context:
space:
mode:
authorLeah Neukirchen <leah@vuxu.org>2020-05-15 20:37:06 +0200
committerLeah Neukirchen <leah@vuxu.org>2020-05-15 20:37:06 +0200
commitd823b09d9a68368459ad598d8bd8413a751950f2 (patch)
tree7516ad7189699545fc0b9c3d46e08a992713f8ab
parent1c152c32a2a5f302ba7596d8a415670f6a8f1a72 (diff)
downloadhittpd-d823b09d9a68368459ad598d8bd8413a751950f2.tar.gz
hittpd-d823b09d9a68368459ad598d8bd8413a751950f2.tar.xz
hittpd-d823b09d9a68368459ad598d8bd8413a751950f2.zip
explain how to run with CAP_NET_BIND_SERVICE
-rw-r--r--FEATURES5
1 files changed, 5 insertions, 0 deletions
diff --git a/FEATURES b/FEATURES
index c46a4e3..5524dd8 100644
--- a/FEATURES
+++ b/FEATURES
@@ -23,6 +23,11 @@ Anti features:
 - No config files
 - No CGI support
 - No SSL, use behind hitch or the like
+- No setuid, if you want to bind to a low port, use (on Linux)
+
+	capsh --keep=1 --user=www-data \
+	      --inh=cap_net_bind_service --addamb=cap_net_bind_service -- \
+	      -c '/usr/local/bin/hittpd /srv/http'
 
 Other nifty small webservers to look at: