4 ms·
This only grants that right to a single executable--it doesn't allow everyone on the system to bind to low port numbers.
by ejdyksen 14y ago
This only grants that right to a single executable--it doesn't allow everyone on the system to bind to low port numbers.
- Hello71 14y agoIt kinda does, unless you restrict execution of nodejs to root/nodejs group anyways. It's like setting /bin/bash setuid.
- ejdyksen 14y agoThat's true--since node can run arbitrary code for you, you'd want to restrict execution of node to a known set of users.
- drivebyacct2 14y agoI don't really understand. Does it grant nodejs root privileges? I assumed it ONLY allowed for binding to port 80, not all root privileges...