4 ms·
That kinda defeats the purpose of restricting ports under 1024.
by Hello71 14y ago
That kinda defeats the purpose of restricting ports under 1024.
- ejdyksen 14y agoThis only grants that right to a single executable--it doesn't allow everyone on the system to bind to low port numbers.
- Hello71 14y agoIt kinda does, unless you restrict execution of nodejs to root/nodejs group anyways. It's like setting /bin/bash setuid.
- ejdyksen 14y agoThat's true--since node can run arbitrary code for you, you'd want to restrict execution of node to a known set of users.
- drivebyacct2 14y agoI don't really understand. Does it grant nodejs root privileges? I assumed it ONLY allowed for binding to port 80, not all root privileges...
- seiji 14y agoWhat was the purpose of that arbitrary limitation again? It's mostly a holdover from the olden days we now have to constantly work around (by mostly having lazy people run things as root everywhere).