comparison src/os/unix/ngx_linux_config.h @ 7174:84e53e4735a4

Retain CAP_NET_RAW capability for transparent proxying. The capability is retained automatically in unprivileged worker processes after changing UID if transparent proxying is enabled at least once in nginx configuration. The feature is only available in Linux.
author Roman Arutyunyan <arut@nginx.com>
date Wed, 13 Dec 2017 20:40:53 +0300
parents 7142b04337d6
children 56923e8e01a5
comparison
equal deleted inserted replaced
7173:057adb2a9d23 7174:84e53e4735a4
97 #include <linux/aio_abi.h> 97 #include <linux/aio_abi.h>
98 typedef struct iocb ngx_aiocb_t; 98 typedef struct iocb ngx_aiocb_t;
99 #endif 99 #endif
100 100
101 101
102 #if (NGX_HAVE_CAPABILITIES)
103 #include <sys/capability.h>
104 #endif
105
106
102 #define NGX_LISTEN_BACKLOG 511 107 #define NGX_LISTEN_BACKLOG 511
103 108
104 109
105 #ifndef NGX_HAVE_SO_SNDLOWAT 110 #ifndef NGX_HAVE_SO_SNDLOWAT
106 /* setsockopt(SO_SNDLOWAT) returns ENOPROTOOPT */ 111 /* setsockopt(SO_SNDLOWAT) returns ENOPROTOOPT */