Arvin 2511b1285b Fix tun on: recognize setcap capability and block sudo on user install (#267) ...

Problem 1 - can_manage_tun_safely() missed setcap grants:
- Add kernel_binary_has_cap_net_admin(): use getcap to detect file
  capability cap_net_admin on the kernel binary, so a user who ran
  'setcap cap_net_admin,cap_net_raw+ep mihomo' is allowed through.
- Extend can_manage_tun_safely() to call this check after the existing
  capsh (current-shell) check.
- In cmd_tun_on(), add a process-level fallback via the existing
  tun_process_has_cap_net_admin() for cases where getcap is unavailable
  but the running process already holds the capability.

Problem 2 - sudo clashctl corrupts runtime file ownership:
- Add guard_sudo_on_user_install(): detects root + SUDO_USER +
  stored install scope == user, refuses with a clear message and
  instructs the user to run as the install user directly.
- Call the guard at the entry of both cmd_tun_on() and cmd_tun_off()
  so neither write path can corrupt runtime/ file ownership.

2026-06-16 16:40:19 +08:00

..

core

Fix tun on: recognize setcap capability and block sudo on user install (#267)

2026-06-16 16:40:19 +08:00

dev

Detect Tun traffic across default and parsed CIDR ranges

2026-06-16 16:16:12 +08:00

init

Improve install messaging for mixed-port bind denied

2026-04-14 11:36:09 +08:00