[jira] [Commented] (TS-1687) Solaris has POSIX capabilities, but TPROXY doesn't know of these.

["Igor Galić (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/TS-1687?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13580036#comment-13580036 ] 

Igor Galić commented on TS-1687:
--------------------------------

Since 9.0 [Capsicum|http://www.freebsd.org/cgi/man.cgi?capsicum] provides a fine-grained privileges framework for FreeBSD.
[cap_enter(2)|http://www.freebsd.org/cgi/man.cgi?cap_enter] and [cap_new(2)|http://www.freebsd.org/cgi/man.cgi?cap_new] document the main calls we need to implement a these calls for FreeBSD.
                
> Solaris has POSIX capabilities, but TPROXY doesn't know of these. 
> ------------------------------------------------------------------
>
>                 Key: TS-1687
>                 URL: https://issues.apache.org/jira/browse/TS-1687
>             Project: Traffic Server
>          Issue Type: Bug
>            Reporter: Igor Galić
>
> When compiling ATS for Solaris, enabling the full feature set is impossible because currently the handling of POSIX capabilities (privileges under Solaris) is restricted to Linux:
> {noformat}
> checking whether to enable transparent proxy... configure: error: in `/home/i.galic/src/trafficserver':
> configure: error: TPROXY feature requires POSIX capabilities.
> {noformat}
> Here's the man page documenting [privileges(5)|http://illumos.org/man/5/privileges] - and here's a sample use, in the form of Apache httpd's [mod_pvivileges|https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/arch/unix/mod_privileges.c]
> Further man relevant man pages: [getpriv(2), setppriv(2)|http://illumos.org/man/2/setppriv] [getpflags(2), setpflags(2)|http://illumos.org/man/2/setpflags]
> As well as the "highlevel API" (convinience wrappers) such as [priv_set(3C)|http://illumos.org/man/3C/priv_set]

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira