Messages in this thread | | | Date | Mon, 26 Nov 2007 10:52:26 +0100 | From | Mikael Ståldal <> | Subject | Re: Possibility to adjust the only-root-can-bind-to-port-under-1024 limit |
| |
Radoslaw Szkodzinski (AstralStorm) skrev: >> In Linux you have to be root in order to listen to TCP or UDP ports below 1024 (the >> well-known ports). As far as I know, this limit is hardcoded in the kernel. > > The proper way to enable port <= 1024 binding support is adding CAP_NET_BIND_SERVICE to > the process capability set, e.g. by using file-system capabilities.
And how do you protect ports >1024 from any user binding to them?
Isn't the 1024 limit somewhat obsolete and arbitrary today?
/Mikael
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |