Re: Ambientcapabilities - solved was: (Re: thoughts about freeradius package (especially dhcp))

[Carsten Schoenert <c.schoenert@t-online.de>]

Hello Kamil,

Am 05.09.2017 um 05:04 schrieb Kamil Jońca:
> kjonca@poczta.onet.pl (Kamil Jońca) writes:
> 
>> Russ Allbery <rra@debian.org> writes:
>>
>>> kjonca@poczta.onet.pl (Kamil Jońca) writes:
>>>
>>>> Hm. I tried to add
>>>
>>>> AmbientCapabilities=CAP_NET_ADMIN CAP_NET_RAW CAP_NET_BIND_SERVICE
> 
> It was my fault.
> I used
> #setcap "" /usr/sbin/freeradius
> 
> but I should
> #setcap -r  /usr/sbin/freeradius
> 
> Now all works as expected.

could you please add your information about the changes to the wiki please?
Maybe a now paragraph on the Hardening site? I'm not sure if this is the
right place for this but content can be moved anyways later.

https://wiki.debian.org/Hardening

-- 
Regards
Carsten Schoenert