[asterisk-bugs] [Asterisk 0014004]: [patch] restart gracefully drops cap_net_admin capability

Thu Jan 29 17:46:22 CST 2009

A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=14004 
====================================================================== 
Reported By:                nemo
Assigned To:                blitzrage
====================================================================== 
Project:                    Asterisk
Issue ID:                   14004
Category:                   Core/General
Reproducibility:            always
Severity:                   minor
Priority:                   normal
Status:                     closed
Asterisk Version:           1.4.22 
Regression:                 No 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
Resolution:                 fixed
Fixed in Version:           
====================================================================== 
Date Submitted:             2008-12-01 15:39 CST
Last Modified:              2009-01-29 17:46 CST
====================================================================== 
Summary:                    [patch] restart gracefully drops cap_net_admin
capability
Description: 
When running asterisk as non-root and setting IP TOS to a value that
requires cap_net_admin or root privileges, ``restart gracefully'' or
similar commands will cause observed tcpdump output to show the IP TOS
value being set to 0 instead of the requested value.
====================================================================== 

---------------------------------------------------------------------- 
 (0099105) svnbot (reporter) - 2009-01-29 17:46
 http://bugs.digium.com/view.php?id=14004#c99105 
---------------------------------------------------------------------- 
Repository: asterisk
Revision: 172503

_U  branches/1.6.0/
U   branches/1.6.0/apps/app_dahdiras.c
U   branches/1.6.0/apps/app_externalivr.c
U   branches/1.6.0/apps/app_festival.c
U   branches/1.6.0/apps/app_ices.c
U   branches/1.6.0/apps/app_mp3.c
U   branches/1.6.0/apps/app_nbscat.c
U   branches/1.6.0/autoconf/ast_func_fork.m4
U   branches/1.6.0/build_tools/menuselect-deps.in
U   branches/1.6.0/configure
U   branches/1.6.0/main/asterisk.c
U   branches/1.6.0/res/res_agi.c
U   branches/1.6.0/res/res_musiconhold.c

------------------------------------------------------------------------
r172503 | tilghman | 2009-01-29 17:46:22 -0600 (Thu, 29 Jan 2009) | 23
lines

Merged revisions 172441 via svnmerge from 
https://origsvn.digium.com/svn/asterisk/trunk

................
  r172441 | tilghman | 2009-01-29 17:15:40 -0600 (Thu, 29 Jan 2009) | 16
lines

  Merged revisions 172438 via svnmerge from 
  https://origsvn.digium.com/svn/asterisk/branches/1.4

  ........
    r172438 | tilghman | 2009-01-29 16:54:29 -0600 (Thu, 29 Jan 2009) | 9
lines

    Lose the CAP_NET_ADMIN at every fork, instead of at startup. 
Otherwise, if
    Asterisk runs as a non-root user and the administrator does a 'restart
now',
    Asterisk loses the ability to set QOS on packets.
    (closes issue http://bugs.digium.com/view.php?id=14004)
     Reported by: nemo
     Patches: 
           20090105__bug14004.diff.txt uploaded by Corydon76 (license 14)
     Tested by: Corydon76
  ........
................

------------------------------------------------------------------------

http://svn.digium.com/view/asterisk?view=rev&revision=172503 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2009-01-29 17:46 svnbot         Checkin                                      
2009-01-29 17:46 svnbot         Note Added: 0099105                          
======================================================================