From 03c8908ec6429a67c3a8f480f1002788ff155bfb Mon Sep 17 00:00:00 2001 From: Olivier Gayot Date: Wed, 20 Jun 2018 18:09:41 +0200 Subject: Stop requiring CAP_NET_ADMIN Since the following commit in the Linux kernel tree 0fdc100bdc4b ethtool: allow non-netadmin to query settings it is no longer necessary to have the CAP_NET_ADMIN capability to query a device speed using ioctl(..., SIOCETHTOOL) in conjonction with the ETHTOOL_GSET ethtool command. The mentioned commit landed first in the 2.6.37 version of the Kernel. This version is no longer maintained nowdays. Since it is not necessary anymore, it is strongly prefered from a security standpoint to drop the CAP_NET_ADMIN capability from the binary. Signed-off-by: Olivier Gayot --- man/i3status.man | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) (limited to 'man') diff --git a/man/i3status.man b/man/i3status.man index 31f25ad..fecd079 100644 --- a/man/i3status.man +++ b/man/i3status.man @@ -66,7 +66,6 @@ wireless wlan0 { } ethernet eth0 { - # if you use %speed, i3status requires the cap_net_admin capability format_up = "E: %ip (%speed)" format_down = "E: down" } @@ -315,8 +314,7 @@ network interface found on the system (excluding devices starting with "lo"). Gets the IP address and (if possible) the link speed of the given ethernet interface. If no IPv4 address is available and an IPv6 address is, it will be -displayed. Getting the link speed requires the cap_net_admin capability. -Set it using +setcap cap_net_admin=ep $(which i3status)+. +displayed. The special interface name `_first_` will be replaced by the first non-wireless network interface found on the system (excluding devices starting with "lo"). -- cgit v1.2.3