A non root process needs to signal reload to nginx master (as root) without sudo
I've tried using setcap and setpriv with CAP_KILL, both not work. # getcap nginx/sbin/nginx nginx/sbin/nginx = cap_kill+ip #su user01 -s /bin/sh -c 'nginx/sbin/nginx -s reload' nginx: [alert] kill(68, 1) failed (1: Operation not permitted) #setpriv --inh-caps +cap_5 --ambient-caps +cap_5 su user001 -s /bin/sh -c 'nginx/sbin/nginx -s reload' nginx: [alert] kill(68, 1) failed (1: Operation not permitted) I don't konw if this is specifc to nginx only or I mis used the linux capability? looking foward for the help BR, Allen Posted at Nginx Forum: https://forum.nginx.org/read.php?2,289755,289755#msg-289755 _______________________________________________ nginx mailing list [email protected] http://mailman.nginx.org/mailman/listinfo/nginx
