3 ms·
I believe this has been the recommendation for quite some time. It's how users are able to use ping, for example. That said, I kinda agree with the author tha
by silisili 4y ago
I believe this has been the recommendation for quite some time. It's how users are able to use ping, for example.
That said, I kinda agree with the author that it feels weird today. And the vast majority of people will just reach for the sudo hammer instead of researching to find setcap, which is a security nightmare.
I'd probably argue keeping the idea of privileged ports, but not having it enabled by default anymore, I guess.
- bombcar 4y agoUnix is strange in that the vast majority of computers running it are single user, but still have everything for multiuser support laying around.
- Beltalowda 4y agoMost systems do tend to use different users for running services though; so while there's a single "human user", the multi-user support is being used quite a lot.
- bombcar 4y agoWhich is another bandaid - "system users" is a hack that should be better handled by a system designed to handle permissions, etc in a more granular method than "this is a user".