Comment by waittrtwut | Hacker News Reader

Top New Best Ask Show Jobs

Comment by waittrtwut | Hacker News Reader

Parent Full thread

For #2 did you mean CAP_NET_RAW or CAP_SYS_RAWIO?

CAP_SYS_RAWIO looks even more terrifying, but CAP_NET_RAW gates your ability to use raw sockets.

https://linux.die.net/man/7/capabilities

I raised this stuff in 2014.

https://github.com/moby/moby/issues/5661

Reply on news.ycombinator.com