#!/bin/sh

exec 2>&1
exec setpriv --reuid _shadowsocks --regid _shadowsocks --clear-groups \
	--ambient-caps -all,+net_bind_service \
	--inh-caps -all,+net_bind_service \
	--bounding-set -all,+net_bind_service \
	--no-new-privs -- ssservice local -c /etc/shadowsocks-rust/config.json
