Graylog2 / fpm-recipes

Graylog package build recipes
http://docs.graylog.org/en/latest/pages/installation/operating_system_packages.html
18 stars 19 forks source link

Add AmbientCapabilities=CAP_NET_BIND_SERVICE to systemd service #129

Closed drewmiranda-gl closed 9 months ago

drewmiranda-gl commented 9 months ago

For https://github.com/Graylog2/graylog2-server/issues/14867

Users cannot bind to ports <1024 without this setting. Its much more common place to configure HTTPS/TLS which would require binding to TCP 443. This will save our users a lot of trouble.

Additionally, if a user does manually add this to their systemd service file, the file will be ovewritten when the package applies an update leading to unexpected failures.

Notes for Reviewers