Hacker News new | ask | show | jobs
by b409ba0801cd21 1393 days ago
When I first learned about how privileged ports worked, I thought a better system would be to have per port security that resembles filesystem security. That is, each port would have an owner that can decide which users may use the port. A program could run before starting network services that would load the security information into the kernel, and equivalents to chown and chmod would be available to update the persistence file and the kernel in tandem (or separately).
1 comments

Sounds very similar to SELinux.