[
https://issues.apache.org/jira/browse/TS-1687?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13580036#comment-13580036
]
Igor Galić commented on TS-1687:
--------------------------------
Since 9.0 [Capsicum|http://www.freebsd.org/cgi/man.cgi?capsicum] provides a
fine-grained privileges framework for FreeBSD.
[cap_enter(2)|http://www.freebsd.org/cgi/man.cgi?cap_enter] and
[cap_new(2)|http://www.freebsd.org/cgi/man.cgi?cap_new] document the main calls
we need to implement a these calls for FreeBSD.
> Solaris has POSIX capabilities, but TPROXY doesn't know of these.
> ------------------------------------------------------------------
>
> Key: TS-1687
> URL: https://issues.apache.org/jira/browse/TS-1687
> Project: Traffic Server
> Issue Type: Bug
> Reporter: Igor Galić
>
> When compiling ATS for Solaris, enabling the full feature set is impossible
> because currently the handling of POSIX capabilities (privileges under
> Solaris) is restricted to Linux:
> {noformat}
> checking whether to enable transparent proxy... configure: error: in
> `/home/i.galic/src/trafficserver':
> configure: error: TPROXY feature requires POSIX capabilities.
> {noformat}
> Here's the man page documenting
> [privileges(5)|http://illumos.org/man/5/privileges] - and here's a sample
> use, in the form of Apache httpd's
> [mod_pvivileges|https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/arch/unix/mod_privileges.c]
> Further man relevant man pages: [getpriv(2),
> setppriv(2)|http://illumos.org/man/2/setppriv] [getpflags(2),
> setpflags(2)|http://illumos.org/man/2/setpflags]
> As well as the "highlevel API" (convinience wrappers) such as
> [priv_set(3C)|http://illumos.org/man/3C/priv_set]
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
