Package: obfs4proxy Version: 0.0.14-1 amd64
Issue: overwriting capabilities
During update the package overwrites an installed /usr/bin/obfs4proxy
without preserving the capabilities, eg. set by
setcap cap_net_bind_service=+ep /usr/bin/obfs4proxy
So a Tor bridge with a port below 1024 emits after restart "obfs4 listen
tcp 0.0.0.0:443: bind: permission denied" to its warn log but continues
without obfuscation.
BTW, shouldn't an upgrade of obfs4proxy restart Tor unconditionally?
--
Toralf
