3 ms·
>it can open up that port to hijacking by rogue processes That seems relevant if the process is using a non-privileged port that's >= 1024. If we're talking ab
by tyingq 5y ago
>it can open up that port to hijacking by rogue processes
That seems relevant if the process is using a non-privileged port that's >= 1024. If we're talking about privileged ports (<= 1023), though, only another root process could hijack that, and those can already hijack you many other ways.
- cmeacham98 5y agoWhat about processes that aren't root but hold CAP_NET_BIND_SERVICE?
- tyingq 5y agoSure, should have mentioned that, and perhaps namespaces too.