3 ms·
this is actually dangerous advice. The reason privileged ports require root is so that they cannot be easily intercepted by userland processes. The entire rea
by dijit 3y ago
this is actually dangerous advice.
The reason privileged ports require root is so that they cannot be easily intercepted by userland processes.
The entire reason for the root requirement is this; it's expected that after your port assignment you drop your privileges to a lesser user. But requiring root to bind is a feature, not a bug.
If you do not have this then intentionally crashing the process for a user and rebinding the port as a standard user (even `nobody`) is possible.
This means if you break into someones mail server and run as the mail user, you would be able to bind ssh ports (if they are not privileged ports <1024).
Of course your mail server should be running as the `mail` user or some equivelent, because only the binding of the ports should be done on startup as root and then it should drop into the mail user.
- fiddlerwoaroof 3y agoOnly if you can kill the ssh server that's already listening on the port.
- dijit 3y agoYes, but you can do so as a regular user in some cases. Security is an onion.
- ChoHag 3y ago[dead]