-
-
Notifications
You must be signed in to change notification settings - Fork 75
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add support for --unprivileged mode on Linux #741
Comments
It will be nice when trippy does not need to invoke |
That's actually already the case, the same way traceroute needs to be given permission to do what it does you can give that permission to trippy and not full admin access. sudo setcap CAP_NET_RAW+p $(which trip) Taken from option 3 here https://github.com/fujiapple852/trippy/#unix So you don't need to use sudo to run it. Just to give it permission to access raw sockets. |
Thanks, yes, it didn't occur to me. Then what would be left to do in the issue at hands? |
@almereyda Linux provides (at least) three mechanisms for an unprivileged (non-root) user to run a ping/traceroute. The first way is what @c-git is referring to; where the The second approach is similar and involves setting the The third approach, which is what this issues addresses, involves using some platform specific Linux APIs (as described here) in order to be able to send and receive probes for ping/traceroute without requiring any privileges. This is what the Linux native I hope that clears it up! |
Thank you for the thorough explanation. I do now understand better why this imposes an effort on the maintenance, because the major computation platforms all handle selectively increased privilege of process permissions differently. |
No description provided.
The text was updated successfully, but these errors were encountered: