Re: Is this mail list dead?

[Rik van Riel <riel@conectiva.com.br>]

On Mon, 12 Mar 2001, Tracy R Reed wrote:
> On Tue, Mar 13, 2001 at 12:03:44AM -0300, Rik van Riel wrote:
> > Is there anything I've forgotten to mention, or are there
> > other things needed to make Linux distro's more secure without
> > impacting functionality or ease-of-use ?
> 
> Is there really any reason to require programs to be run as root to
> bind to ports <1024 anymore?

No. I remember somebody mentioning a wrapper program to be able
to load eg. named with just CAP_NET_BIND_SERVICE set and no root
rights.

This keeps the SUID part down to just this (small) wrapper
program. Can anybody remember the name ??

Andreas, could we have this thing in Conectiva when we dig it
up ? ;)

regards,

Rik
--
Virtual memory is like a game you can't win;
However, without VM there's truly nothing to lose...

		http://www.surriel.com/
http://www.conectiva.com/	http://distro.conectiva.com.br/

-
Securedistros: A common list for all secured Linux distributions
Archive:       http://humbolt.nl.linux.org/lists/