Re: allowing ordinary users to open privileged ports

Kapetanakis Giannis <[email protected]> Mon, 6 Sep 2004 09:07:21 +0300 (EEST)
Newsgroups gmane.comp.security.sun
Message-ID <[email protected]>
On Sat, 4 Sep 2004, Casper Dik wrote:

> In Solaris 9 and before it is not possible to achieve this other than
> by running applications as root.
>
> In Solaris 10, you can give users the net_privaddr privilege
> which allows them to bind to privilege ports.
>
> Of course, this means that no part of the infrastructure should
> depend on reserved port based "authentication".
>
> (I.e., no .rhosts file authentication; no "auth_sys" NFS, etc.)
>
> Casper

Just one question, by giving the net_privaddr privilege you allow
all low ports to the specific user, or is there a way to assign a set
of ports only?

Kapetanakis Giannis