3 ms·
So if it weren't in the kernel it would need to run as root, wouldn't it? That gives the attacker nearly the same rights but a much more convenient programming
by usr1106 4y ago
So if it weren't in the kernel it would need to run as root, wouldn't it? That gives the attacker nearly the same rights but a much more convenient programming environment.
- fragmede 4y agoWith CAP_NET_BIND_SERVICE, it doesn't need to be run as root.
- ilyt 4y agoAnd without it can just bind socket then change UID
- usr1106 4y agoBinding to a low socket is one thing. But as a file server it needs to access many users' files. That can be done without being root, too. Reducing the attack surface on one end but weakening things a bit on the other. A net gain I might concede, but not completely black and white.