News for hackers. Stuff that matters.

A comment on Dear Linux, Privileged Ports Must Die. Parent comment

Re:Dear Linux, Privileged Ports Must Die by benob on Thursday September 01, 2022 @02:58AM (#32672955)
Could the os restrict a range of ports to a non-root user?

That would cover your concerns, wouldn't it?

[ Parent | on HN ]
Re:Dear Linux, Privileged Ports Must Die by INTPenis on Thursday September 01, 2022 @03:03AM (#32672983)
They did, it's called 1025-65535. This is literally ancient tech. There are more modern (and perhaps more granular) ways to do it today with cgroups and nftables I'm sure.

I myself am an avid SElinux user and I know for sure you can restrict ports to user roles there.

[ Parent | on HN ]
Re:Dear Linux, Privileged Ports Must Die by BossingAround on Thursday September 01, 2022 @09:43AM (#32676113)
What resources did you use to get into SELinux? I am an SELinux user, but it's more like "I can debug it and make it work without turning it off".
[ Parent | on HN ]
Re:Dear Linux, Privileged Ports Must Die by INTPenis on Thursday September 01, 2022 @11:24AM (#32677726)
I have the book SElinux by example which is still very relevant.

But these days I'd say you can get all the same info online[1].

1. https://github.com/SELinuxProject/selinux-notebook

[ Parent | on HN ]