From f6421c3498a1dcb6f89358fab62b070d009c33d4 Mon Sep 17 00:00:00 2001 From: Simon Ser Date: Fri, 14 Apr 2023 17:35:51 +0200 Subject: [PATCH] doc/packaging: add section about binding to privileged ports --- doc/packaging.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/doc/packaging.md b/doc/packaging.md index 96038ea..c8a25ad 100644 --- a/doc/packaging.md +++ b/doc/packaging.md @@ -20,6 +20,15 @@ config file and the admin Unix socket. These can be customized via the The default configuration file's template is stored in `config.in`. +## Binding to privileged ports + +soju might need to bind to privileged ports: the built-in identd will need to +listen on port 113. On Linux, unless your service manager provides a way to +give extra capabilities to soju, the `CAP_NET_BIND_SERVICE` capability can be +assigned to the soju executable: + + setcap 'cap_net_bind_service=+ep' soju + ## Service manager integration soju is designed to be run as a system-wide service under a separate user