priviledges ports, was Re: spamd

> it has to bind before privilege drop if it binds to a privileged port,
aka a
> port < 1024. spamd can and should listen on a port >= 1024, e. g.
8025.

This may be heresy, but the issue of ports < 1024 being priviledged is 'old' and has been somewhat overshadowed by the fact that for the past 10 years, almost anyone can have their own box to admin, and you can open ports wherever - its just the ports on machiners where you don't have admin privs that matter.

Would there be any mileage in removing the underlying restriction, making some code able to run without any special privs at all, and putting the control of 'who' can bind to 'what' in external rules, PF or systrace for example ?

Peter Received on Thu Jan 30 04:49:26 2003