4 ms·
It kinda does, unless you restrict execution of nodejs to root/nodejs group anyways. It's like setting /bin/bash setuid.
by Hello71 14y ago
It kinda does, unless you restrict execution of nodejs to root/nodejs group anyways. It's like setting /bin/bash setuid.
- ejdyksen 14y agoThat's true--since node can run arbitrary code for you, you'd want to restrict execution of node to a known set of users.
- drivebyacct2 14y agoI don't really understand. Does it grant nodejs root privileges? I assumed it ONLY allowed for binding to port 80, not all root privileges...