3 ms·
Hm. Why doesn't it work for scripts? I thought the capabilities were stored in the filesystem?
by voltagex_ 9y ago
Hm. Why doesn't it work for scripts? I thought the capabilities were stored in the filesystem?
- ClashTheBunny 9y agoBecause the script is probably not what is actually opening the port. It is going to execute something else that will open the port.
- tetromino_ 9y agoAn OS that allows shebang scripts to have setuid or capabilities ends up allowing security holes, as seen in traditional Unix variants; see http://www.faqs.org/faqs/unix-faq/faq/part4/section-7.html http://www.faqs.org/faqs/unix-faq/faq/part4/section-7.html and https://www.in-ulm.de/~mascheck/various/shebang/#setuid https://www.in-ulm.de/~mascheck/various/shebang/#setuid Therefore, Linux simply doesn't allow it.
- deleted 9y ago[deleted]