2 ms·
Yeah, but requiring the process to start as root adds a window of vulnerability and the process has to drop privileges correctly. You could also do it in the l
by fiddlerwoaroof 3y ago
Yeah, but requiring the process to start as root adds a window of vulnerability and the process has to drop privileges correctly.
You could also do it in the load balancer/router.
- superb_dev 3y agoSystemd can setup the privileges before starting the process
- greyface- 3y agoRun this as root once: setcap 'cap_net_bind_service=+ep' /path/to/executable Now, the process doesn't need to start as root and drop privs.