<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
</head>
<body bgcolor="#ffff99" text="#000000">
I'm preparing for a client install of * by doing a fresh one in-house.
Unlike my earlier installation that runs asterisk as superuser, my
current experimental box runs without such privilege. This is causing
it to moan that it can't set TOS. I absolutely don't want to install
it on the client LAN without this capability. If need be, I'll set the
binary to run setuid root.<br>
<br>
But I'm looking for something more elegant. While googling, I found a
suggestion to use iptables mangle rules to set TOS for all packets
going out of the box on ports like 5060 and 10000:20000. Not a bad
hack, but indiscriminate and this box will be handling other traffic
besides the RTP. I'd like to do better.<br>
<br>
I thought of using POSIX access control to enable asterisk to do TOS
setting without being root (would this be CAP_NET_RAW?), which sounds
perfect, but so far I'm operating with stock ubuntu hardy, and I would
like to avoid a kernel build to add this capability.<br>
<br>
Any other ideas?<br>
<br>
</body>
</html>