Re: [Linux Diffserv] Need to be root to setsockopt() for EF?

[Pekka Savola <pekkas@xxxxxxxxxx>]

On Tue, 2 Oct 2001, Craig Rodrigues wrote:
> Can someone shed some light as to why I got this
> error under Linux?  Is it configuration problem,
> or is there some sort of policy decision in the kernel that
> requires the process to be run as root when setting
> those DSCP values?

A part of DSCP field was previously Precedence.

Linux has required that in order to use 'Critical' or higher Precedence,
one must have CAP_NET_ADMIN capability, in most cases, root.

I'm not one to say whether this restriction should be removed.  Perhaps.

-- 
Pekka Savola                 "Tell me of difficulties surmounted,
Netcore Oy                   not those you stumble over and fall"
Systems. Networks. Security.  -- Robert Jordan: A Crown of Swords