mirrors/AdGuardHome
1
0
Fork 0
mirror of https://github.com/AdguardTeam/AdGuardHome.git synced 2024-10-22 20:07:07 +03:00
Code Issues Projects Releases Packages Wiki Activity

add information about linux capabilities

Ainar Garipov 2020-10-29 17:37:07 +03:00
parent 8a972fce62
commit 826151b5c0
1 changed files with 7 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
Getting-Started.md

@ -153,18 +153,20 @@ This setup will automatically cover all the devices connected to your home route
5. Choose ’Use the following DNS server addresses’ and enter your AdGuard Home address there.
<a id="running-without-superuser"></a>
## Running without superuser (linux only)
## Running without superuser (Linux only)
You can run AdGuard Home without superuser privileges, but you need to either grant the binary a capability (on Linux) or instruct it to use a different port (all platforms).
#### Granting the CAP_NET_BIND_SERVICE capability (on Linux)
#### Granting the necessary capabilities
Note: using this method requires the `setcap` utility. You may need to install it using your Linux distribution's package manager.
Using this method requires the `setcap` utility. You may need to install it
using your Linux distribution's package manager.
To allow AdGuard Home running on Linux to listen on port 53 without superuser privileges, run:
To allow AdGuard Home running on Linux to listen on port 53 without superuser
privileges, as well as bind to a particular interface run:
```bash
sudo setcap CAP_NET_BIND_SERVICE=+eip ./AdGuardHome
sudo setcap 'CAP_NET_BIND_SERVICE=+eip CAP_NET_RAW=+eip' ./AdGuardHome
```
Then run `./AdGuardHome` as a unprivileged user.