aboutgitcodebugslistschat
path: root/passt.1
diff options
context:
space:
mode:
Diffstat (limited to 'passt.1')
-rw-r--r--passt.17
1 files changed, 6 insertions, 1 deletions
diff --git a/passt.1 b/passt.1
index 554d31d..bf8228d 100644
--- a/passt.1
+++ b/passt.1
@@ -659,7 +659,12 @@ possible to bind sockets to foreign addresses.
If the port forwarding configuration requires binding to port numbers lower than
1024, \fBpasst\fR and \fBpasta\fR will try to bind to them, but will fail if not
running as root, or without the \fICAP_NET_BIND_SERVICE\fR Linux capability, see
-\fBservices\fR(5) and \fBcapabilities\fR(7).
+\fBservices\fR(5) and \fBcapabilities\fR(7). To grant the
+\fICAP_NET_BIND_SERVICE\fR capability to passt, you can issue, as root:
+
+.RS
+setcap 'cap_net_bind_service=+ep' $(which passt)
+.RE
.SS ICMP/ICMPv6 Echo sockets