mirrors/AdGuardHome
1
0
Fork 0
mirror of https://github.com/AdguardTeam/AdGuardHome.git synced 2024-10-22 20:07:07 +03:00
Code Issues Projects Releases Packages Wiki Activity

add information about linux capabilities

Ainar Garipov 2020-10-29 17:37:07 +03:00
parent 8a972fce62
commit 826151b5c0
1 changed files with 7 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
Getting-Started.md

@ -153,18 +153,20 @@ This setup will automatically cover all the devices connected to your home route
5. Choose ’Use the following DNS server addresses’ and enter your AdGuard Home address there. 5. Choose ’Use the following DNS server addresses’ and enter your AdGuard Home address there.
<a id="running-without-superuser"></a> <a id="running-without-superuser"></a>
## Running without superuser (linux only) ## Running without superuser (Linux only)
You can run AdGuard Home without superuser privileges, but you need to either grant the binary a capability (on Linux) or instruct it to use a different port (all platforms). You can run AdGuard Home without superuser privileges, but you need to either grant the binary a capability (on Linux) or instruct it to use a different port (all platforms).
#### Granting the CAP_NET_BIND_SERVICE capability (on Linux) #### Granting the necessary capabilities
Note: using this method requires the `setcap` utility. You may need to install it using your Linux distribution's package manager. Using this method requires the `setcap` utility. You may need to install it
using your Linux distribution's package manager.
To allow AdGuard Home running on Linux to listen on port 53 without superuser privileges, run: To allow AdGuard Home running on Linux to listen on port 53 without superuser
privileges, as well as bind to a particular interface run:
```bash ```bash
sudo setcap CAP_NET_BIND_SERVICE=+eip ./AdGuardHome sudo setcap 'CAP_NET_BIND_SERVICE=+eip CAP_NET_RAW=+eip' ./AdGuardHome
``` ```
Then run `./AdGuardHome` as a unprivileged user. Then run `./AdGuardHome` as a unprivileged user.