[prev in list] [next in list] [prev in thread] [next in thread] 

List:       linux-net
Subject:    DiffServ EF as a normal user
From:       Mikael Bjerkeland <mikael () bjerkeland ! com>
Date:       2007-11-15 8:34:47
Message-ID: 1195115687.29541.17.camel () mikael-laptop
[Download RAW message or body]

Hello!

We recently configured DiffServ QoS in our network and wanted to tag all
RTP traffic from our SIP server with Expedited Forwarding. We set the
right TOS bit on our Asterisk server, reloaded and got an error message
about a permission problem or something along those lines. We
investigated further and came to the conclusion that since Asterisk was
running as a normal user we didn't have permissions to set EF, since it
appears to be reserved for the root user. Running Asterisk as root is,
as you probably understand, sub-optimal and imposes a security risk.

I've been searching for a way to give a normal user the right
permissions to set DiffServ EF, but couldn't find anything mentioning
this.
As a temporary workaround we set another TOS bit in Asterisk and rewrite
it on our router, but I believe a better approach would be the
possibility to assign one or many normal users rights to use EF. Would
this be possible?


Regards,
Mikael Bjerkeland


["signature.asc" (application/pgp-signature)]
-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[prev in list] [next in list] [prev in thread] [next in thread]