bump rlimit so the eBPF map and program can be loaded

aojea · Jul 16, 2021 · fff3e52 · fff3e52
1 parent 660e79b
commit fff3e52
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 1 deletion.
diff --git a/README.md b/README.md
@@ -5,7 +5,8 @@ netcat version using raw sockets to avoid iptables and/or other OS filtering mec
 ## Requirements
 
 It only works on Linux with a Kernel version > 5.2
-It requires CAP_NET_RAW privileges
+It requires CAP_NET_RAW and CAP_SYS_RESOURCE capabilities
+... or just run it with `sudo` ;)
 
 ## Install
 

diff --git a/nk.go b/nk.go
@@ -110,6 +110,14 @@ func main() {
 		os.Exit(1)
 	}
 
+	// Increase rlimit so the eBPF map and program can be loaded.
+	if err := unix.Setrlimit(unix.RLIMIT_MEMLOCK, &unix.Rlimit{
+		Cur: unix.RLIM_INFINITY,
+		Max: unix.RLIM_INFINITY,
+	}); err != nil {
+		log.Fatalf("setting temporary rlimit: %s", err)
+	}
+
 	if !flagListen {
 		err = connect(ctx, args)
 		if err != nil {