mirror of https://github.com/mkerrisk/man-pages
capabilities.7: Update CAP_NET_ADMIN with notes from include/linux/capability.h
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
This commit is contained in:
parent
b39a2012be
commit
e87268ecb8
|
@ -177,10 +177,38 @@ Create special files using
|
||||||
.BR mknod (2).
|
.BR mknod (2).
|
||||||
.TP
|
.TP
|
||||||
.B CAP_NET_ADMIN
|
.B CAP_NET_ADMIN
|
||||||
Perform various network-related operations
|
Perform various network-related operations:
|
||||||
(e.g., setting privileged socket options,
|
.PD 0
|
||||||
enabling multicasting, interface configuration,
|
.RS
|
||||||
modifying routing tables).
|
.IP * 2
|
||||||
|
interface configuration;
|
||||||
|
.IP *
|
||||||
|
administration of IP firewall, masquerading, and accounting
|
||||||
|
.IP *
|
||||||
|
modify routing tables;
|
||||||
|
.IP *
|
||||||
|
bind to any address for transparent proxying;
|
||||||
|
.IP *
|
||||||
|
set type-of-service (TOS)
|
||||||
|
.IP *
|
||||||
|
clear driver statistics;
|
||||||
|
.IP *
|
||||||
|
set promiscuous mode;
|
||||||
|
.IP *
|
||||||
|
enabling multicasting;
|
||||||
|
.IP *
|
||||||
|
use
|
||||||
|
.BR setsockopt (2)
|
||||||
|
to set the following socket options:
|
||||||
|
.BR SO_DEBUG ,
|
||||||
|
.BR SO_MARK ,
|
||||||
|
.BR SO_PRIORITY
|
||||||
|
(for a priority outside the range 0 to 6),
|
||||||
|
.BR SO_RCVBUFFORCE ,
|
||||||
|
and
|
||||||
|
.BR SO_SNDBUFFORCE .
|
||||||
|
.RE
|
||||||
|
.PD
|
||||||
.TP
|
.TP
|
||||||
.B CAP_NET_BIND_SERVICE
|
.B CAP_NET_BIND_SERVICE
|
||||||
Bind a socket to Internet domain privileged ports
|
Bind a socket to Internet domain privileged ports
|
||||||
|
|
Loading…
Reference in New Issue