additional fixes to socket binding
This commit is contained in:
@@ -227,7 +227,7 @@ if __name__ == '__main__':
|
||||
uvicorn.run(
|
||||
"app:app",
|
||||
# None allows to bind also on ipv6, and is selected if FIREGEX_HOST is any
|
||||
host=None if FIREGEX_HOST == "any" else FIREGEX_HOST,
|
||||
host="" if FIREGEX_HOST == "any" else FIREGEX_HOST,
|
||||
port=FIREGEX_PORT,
|
||||
uds=FIREGEX_SOCKET,
|
||||
reload=DEBUG and not NORELOAD,
|
||||
|
||||
@@ -2,6 +2,13 @@
|
||||
|
||||
chown nobody -R /execute/
|
||||
|
||||
# Create socket directory if SOCKET_DIR is set
|
||||
if [ -n "$SOCKET_DIR" ]; then
|
||||
mkdir -p "$SOCKET_DIR"
|
||||
chown nobody:nobody "$SOCKET_DIR"
|
||||
chmod 755 "$SOCKET_DIR"
|
||||
fi
|
||||
|
||||
echo "[*] Attempting to start with capabilities..."
|
||||
|
||||
if capsh --caps="cap_net_admin,cap_setpcap,cap_setuid,cap_setgid,cap_sys_nice+eip" \
|
||||
|
||||
Reference in New Issue
Block a user