Re: Possibility to adjust the only-root-can-bind-to-port-under-1024 limit

Radoslaw Szkodzinski (AstralStorm) skrev:

In Linux you have to be root in order to listen to TCP or UDP ports below 1024 (the well-known ports). As far as I know, this limit is hardcoded in the kernel.

The proper way to enable port <= 1024 binding support is adding CAP_NET_BIND_SERVICE to

> the process capability set, e.g. by using file-system capabilities.

And how do you protect ports >1024 from any user binding to them?

Isn't the 1024 limit somewhat obsolete and arbitrary today?

/Mikael

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [email protected]
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

---

• Follow-Ups:
  • Re: Possibility to adjust the only-root-can-bind-to-port-under-1024 limit
    • From: Phillip Susi <[email protected]>

• References:
  • Possibility to adjust the only-root-can-bind-to-port-under-1024 limit
    • From: Mikael Ståldal <[email protected]>
  • Re: Possibility to adjust the only-root-can-bind-to-port-under-1024 limit
    • From: Radoslaw Szkodzinski (AstralStorm) <[email protected]>

• Prev by Date: [PATCH] [libata] Return proper ATA INT status in pata_bf54x driver.
• Next by Date: Re: [PATCH] zfcp: add some internal zfcp adapter statistics
• Previous by thread: Re: Possibility to adjust the only-root-can-bind-to-port-under-1024 limit
• Next by thread: Re: Possibility to adjust the only-root-can-bind-to-port-under-1024 limit
• Index(es):
  • Date
  • Thread

[Index of Archives]     [Kernel Newbies]     [Netfilter]     [Bugtraq]     [Photo]     [Stuff]     [Gimp]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Video 4 Linux]     [Linux for the blind]     [Linux Resources]