master dropping privleges on linux should retain bind() privs

cyrusimap / bugzilla-migrate-test

0 stars 1 forks source link

master dropping privleges on linux should retain bind() privs #414

Open brong opened 23 years ago

brong commented 23 years ago

From: Larry Greenfield Bugzilla-Id: 971 Version: 2.1.x Owner: Ken Murchison

brong commented 23 years ago

From: Larry Greenfield

bind9 uses the linux kernel capability stuff to drop all privs but the ability to bind to low number ports. this is probably a worthwhile addition to the master program.

other systems probably have similiar capabilities.

brong commented 22 years ago

From: Henrique de Moraes Holschuh

Currently, if one changes cyrus.conf and tells cyrus to reload, it will be unable to do so in Linux if it needs to bind to any new <1024 ports. bind() privs would fix this problem, too.