* auto-upgrade: don't show Upgrade button on UNIX if running under non-root user

This commit is contained in:
Simon Zolin 2020-03-03 19:22:03 +03:00
parent 4dba20941d
commit 58f1831032
1 changed files with 17 additions and 1 deletions

View File

@ -52,7 +52,23 @@ func getVersionResp(data []byte) []byte {
} }
_, ok := versionJSON[dloadName] _, ok := versionJSON[dloadName]
if ok && ret["new_version"] != versionString && versionString >= selfUpdateMinVersion { if ok && ret["new_version"] != versionString && versionString >= selfUpdateMinVersion {
ret["can_autoupdate"] = true canUpdate := true
tlsConf := tlsConfigSettings{}
Context.tls.WriteDiskConfig(&tlsConf)
if runtime.GOOS != "windows" &&
((tlsConf.Enabled && (tlsConf.PortHTTPS < 1024 || tlsConf.PortDNSOverTLS < 1024)) ||
config.BindPort < 1024 ||
config.DNS.Port < 1024) {
// On UNIX, if we're running under a regular user,
// but with CAP_NET_BIND_SERVICE set on a binary file,
// and we're listening on ports <1024,
// we won't be able to restart after we replace the binary file,
// because we'll lose CAP_NET_BIND_SERVICE capability.
canUpdate, _ = util.HaveAdminRights()
}
ret["can_autoupdate"] = canUpdate
} }
d, _ := json.Marshal(ret) d, _ := json.Marshal(ret)