lkml.org 
[lkml]   [2007]   [Nov]   [20]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: Possibility to adjust the only-root-can-bind-to-port-under-1024 limit
On Tue, 20 Nov 2007 17:09:35 +0100
Mikael Ståldal <mikael.staldal@univits.com> wrote:

> Hello.
>
> > The proper way to enable port <= 1024 binding support is adding CAP_NET_BIND_SERVICE
> > to the process capability set, e.g. by using file-system capabilities.
>
> Is file-system capabilites part of the stable official Linux kernel? From which version?
> How do I use it?
>

They were recently added in 2.6.24-rc1.
(mostly commit b53767719b6cd8789392ea3e7e2eb7b8906898f0)
The patch should be easy to backport, I've seen it in various
distro kernels.

According to the commit, documentation is at
http://www.friedhoff.org/fscaps.html

Some programs already have capability support - they
drop all permissions they don't need.
[unhandled content-type:application/pgp-signature]
\
 
 \ /
  Last update: 2007-11-20 20:25    [W:0.096 / U:0.164 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site