Add support for Linux capabilities #458
Open
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
troglobit
requested changes
Nov 28, 2025
Collaborator
troglobit
left a comment
troglobit
left a comment
There was a problem hiding this comment.
Minor comment, so far this looks great! 💯 Really looking forward to reading the documentation so I might actually learn capabilities, finally 😅
aanderse
force-pushed
the
master
branch
3 times, most recently
from
54ab7dd to
30e69be
Compare
Implement Linux capability support for services, allowing them to run with minimal required privileges instead of running as root. This uses the modern IAB (Inheritable, Ambient, Bounding) API from libcap.
Contributor
Author
|
my friend |
Contributor
Author
|
i tested some services and everything worked as expected @troglobit is there anything else you would like me to add or change before i mark this as ready for review? |
Collaborator
Cool!
Nope, if you're happy and feel ready then please go ahead 😊 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Implement Linux capability support for services, allowing them to run with minimal required privileges instead of running as root. This uses the modern IAB (Inheritable, Ambient, Bounding) API from libcap.
resolves #454
my motivation for this feature: i recently installed
finiton my home server which runscaddyas a web servercap_net_bind_servicewould be very helpful here