commit | 7640e72a319905446456ed4892e25989da72c263 | [log] [tgz] |
---|---|---|
author | Lukas Tribus <luky-37@hotmail.com> | Mon Mar 03 21:10:51 2014 +0100 |
committer | Willy Tarreau <w@1wt.eu> | Mon Mar 03 21:31:10 2014 +0100 |
tree | cbebfb192cf8ca6151a266ed3f50e3b2499938a6 | |
parent | 583021306b34b9860e61b60d4e026b563a04a019 [diff] |
MINOR: set IP_FREEBIND on IPv6 sockets in transparent mode Lets set IP_FREEBIND on IPv6 sockets as well, this works since Linux 3.3 and doesn't require CAP_NET_ADMIN privileges (IPV6_TRANSPARENT does). This allows unprivileged users to bind to non-local IPv6 addresses, which can be useful when setting up the listening sockets or when connecting to backend servers with a specific, non-local source IPv6 address (at that point we usually dropped root privileges already).