lkml.org 
[lkml]   [1999]   [Jan]   [12]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: Disallowing user access to "listening" ports.

    >
    > > I apologize advance for my extreme lack of knowledge in linux development
    > > of any kind. I am only presuming to post to this list under the advice of
    > > a friend.
    > >
    > > I want to make it impossible for daemons to be started under any UID
    > > that is greater than 100, except for UID 65534.
    > >
    > > Some suggested that I make a patch for my kernel that would do something
    > > such as:
    > >
    > > if UID > 100 and UID != 65534
    > > then "do not open socket"
    >
    > ... which means that your lusers will be unable to use email, news, FTP
    > *and* HTTP (i.e. no web for them). Is that *really* the thing you want?
    >

    no..her problem is she wants to stop users >100 && !=65534 from BINDING to
    ports, not connecting to them.

    -Tony
    .-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
    Anthony J. Biacco Network Administrator/Engineer
    admin@intergrafix.net Intergrafix Internet Services

    "The best way to predict the future, is to invent it."
    http://cygnus.ncohafmuta.com http://www.intergrafix.net
    .-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.


    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.rutgers.edu
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2005-03-22 13:49    [W:0.025 / U:120.844 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site