←back to thread

664 points alexflint | 3 comments | | HN request time: 0.639s | source
1. concerndc1tizen ◴[] No.42923928[source]
Which privileges are required? CAP_NET_ADMIN? Or nothing at all?
replies(1): >>42924528 #
2. alexflint ◴[] No.42924528[source]
Nothing at all!

You do need write access to /dev/net/tun. This is standard for all users for the distros that I've looked into, but it is ultimately a distro-specific thing.

replies(1): >>42930692 #
3. concerndc1tizen ◴[] No.42930692[source]
I'm curious because in a Kubernetes environment, the privileges can be minimal, i.e. read only filesystem, running as nobody, empty filesystem, etc.