Re: allowing ordinary users to open privileged ports
Kapetanakis Giannis <[email protected]> Mon, 6 Sep 2004 09:07:21 +0300 (EEST)
| Newsgroups | gmane.comp.security.sun |
|---|---|
| Message-ID | <[email protected]> |
On Sat, 4 Sep 2004, Casper Dik wrote: > In Solaris 9 and before it is not possible to achieve this other than > by running applications as root. > > In Solaris 10, you can give users the net_privaddr privilege > which allows them to bind to privilege ports. > > Of course, this means that no part of the infrastructure should > depend on reserved port based "authentication". > > (I.e., no .rhosts file authentication; no "auth_sys" NFS, etc.) > > Casper Just one question, by giving the net_privaddr privilege you allow all low ports to the specific user, or is there a way to assign a set of ports only? Kapetanakis Giannis