From: Felix Dörre <felix@dogcraft.de>
Date: Wed, 22 Mar 2017 19:05:59 +0000 (+0100)
Subject: Merge "add: natives/README.md"
X-Git-Url: https://code.wpia.club/?p=gigi.git;a=commitdiff_plain;h=687e008f75331588c64cd3b4ca00ca224b1eaff1;hp=448caf5e1e56a72fa2c5217e2e3a2eced0ab1c9b

Merge "add: natives/README.md"
---

diff --git a/natives/README.md b/natives/README.md
new file mode 100644
index 00000000..49144dfe
--- /dev/null
+++ b/natives/README.md
@@ -0,0 +1,10 @@
+This native method exposes the *man:setuid(2)* and *man:setgid(2)* system calls to Java.
+Java code can call `club.wpia.gigi.natives.SetUID.setUid(uid, gid)` to set the user and group ID to the specified values if they’re currently different.
+
+Gigi can use this to bind to Internet domain privileged ports (port numbers below 1024)
+when started as root and then drop privileges by changing to a non-root user.
+
+It should be noted that this is rarely necessary;
+it is much safer to start Gigi as a regular user with `CAP_NET_BIND_SERVICE` (see *man:capabilities(7)*).
+Gigi can also inherit its socket from the environment (file descriptor 0),
+e. g. from systemd (see *man:systemd.socket(5)*) or (x)inetd.