Re:Dear Linux, Privileged Ports Must Die
by kalleboo on Thursday September 01, 2022 @01:19AM
(#32672304)
Reserved ports are a good idea, but just blanket "everything under 1024 is for root" is a broken solution, there should be some configuration where you pick individual ports to reserve for specific users - port 80/443 are only for the nginx user, etc
[ Parent
| on HN ]
Re:Dear Linux, Privileged Ports Must Die
by stjohnswarts on Thursday September 01, 2022 @02:12AM
(#32672638)
I thought this was possible via firewall rules via iptables?
Re:Dear Linux, Privileged Ports Must Die
by bandie91 on Thursday September 01, 2022 @04:18AM
(#32673515)
it's possible to accept/drop(/reject) traffic from specified port if the listening process owner is this-or-that (see nftables "owner" module), but it can not prevent other users to bind on that port, only prevent them to actually communicate on it.