Recent searches
Search options
Linux really needs to remove the “privileged ports” security theater bullshit.
We’re no longer living in the mainframe era. The security properties of the Internet are different to mainframes. This is actually an anti-feature that either complicates life or actually compromises security (when folks run servers as root and forget to drop privileges , etc.).
If anyone has any sway within the kernel team, etc., please do your thing.
GitLabDisable privileged ports security theatre on Linux instead of using setcap (#169) · Issues · Site.js / app Summary Currently, we’re using setcap to grant the CAP_NET_BIND_SERVICE privilege to allow Node.js (during development and testing) and the Site.js binary...
@aral This is just about cap config
`sudo setcap 'cap_net_bind_service=+ep' /usr/bin/nc`
@paillp Please see the linked page (and the articles linked to that) :)