doc/packaging: add section about binding to privileged ports

This commit is contained in:
Simon Ser 2023-04-14 17:35:51 +02:00
parent 662e3f3afe
commit f6421c3498

View File

@ -20,6 +20,15 @@ config file and the admin Unix socket. These can be customized via the
The default configuration file's template is stored in `config.in`. The default configuration file's template is stored in `config.in`.
## Binding to privileged ports
soju might need to bind to privileged ports: the built-in identd will need to
listen on port 113. On Linux, unless your service manager provides a way to
give extra capabilities to soju, the `CAP_NET_BIND_SERVICE` capability can be
assigned to the soju executable:
setcap 'cap_net_bind_service=+ep' soju
## Service manager integration ## Service manager integration
soju is designed to be run as a system-wide service under a separate user soju is designed to be run as a system-wide service under a separate user