Re:Docker 19.03: Rootless Mode (Experimental)
by yjftsjthsd-h on Sunday July 28, 2019 @09:58AM
(#20547557)
Looks like starting with Linux 4.11 you can:
sysctl net.ipv4.ip_unprivileged_port_start=443
( https://stackoverflow.com/questions/413807/is-there-a-way-fo... )
The W3C[1] says "if you connect to a service on one of these ports you can be fairly sure that you have the real thing, and not a fake which some hacker has put up for you." Well, in 2019 computers aren't mainframes run by institutions and hackers can be root of their own system and run whatever they want on port 22.
It's such an incovenience that I'm sure it caused countless services to be unnecessarily run as root.
[1]: https://www.w3.org/Daemon/User/Installation/PrivilegedPorts....