News for hackers. Stuff that matters.

A comment on Attacking Unix Systems via Cups, Part I. Parent comment

Re:Attacking Unix Systems via Cups, Part I by ronjakoi on Friday September 27, 2024 @01:14AM (#41666497)
It's common practice to open the socket to start listening on the <1024 port, then drop the root privileges and continue as a different user.
[ Parent | on HN ]
Re:Attacking Unix Systems via Cups, Part I by cpach on Friday September 27, 2024 @08:17AM (#41669537)
On a modern Linux system, it’s better to use the CAP_NET_BIND_SERVICE capability instead. Then you don’t need to start the process as root at all.
[ Parent | on HN ]