caddy

mirrors/caddy

0 Fork 0

mirror of https://github.com/caddyserver/caddy.git synced 2026-10-28 16:35:23 +08:00

Files

T

History

Francis LavoieandClaude Opus 5.5 0e392c89ba core: Retry privileged binds on EACCES instead of checking port < 1024 (#8253 )

WithBindCapability assumed the kernel's privileged port range ends at
1024, but it is set by net.ipv4.ip_unprivileged_port_start, which can
be anywhere from 0 (Docker's default) to 65535. With a value above
1024, a non-root bind to e.g. :1500 failed even though the capability
was permitted.

Now listen is called normally first, and only if it fails with EACCES
on a TCP/UDP port, and CAP_NET_BIND_SERVICE is permitted but not
effective, the capability is raised and the bind retried. This also
skips raising it when the range starts lower than the port.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-19 19:19:28 +10:00

filesystems

events: Refactor; move Event into core, so core can emit events (#6930 )

2025-03-29 08:15:43 -06:00

metrics

move common metrics-related funcs to internal package

2022-01-25 15:07:17 -05:00

testmocks

caddytls: verifier: caddyfile: re-add Caddyfile support (#6127 )

2024-02-26 00:13:48 +03:00

bindcap_linux_test.go

core: Retry privileged binds on EACCES instead of checking port < 1024 (#8253 )