Hacker News new | ask | show | jobs
by 1331 4710 days ago
A program run as a non-privileged user can access privileged ports using authbind:

http://en.wikipedia.org/wiki/Authbind

3 comments

Indeed, but it would make more sense (in my opinion) to have the web server natively 'de-elevate' it's permissions than to expect the sysadmin to be competent enough to set up authbind manually. Particularly when setuid/setgid is so easy in Go and that every other webserver out there natively drops down to a designated webuser after the daemons been launched and ports binded.
Seems to be GNU/Linux only.
Come in, the water's warm.
authbind seems to defeat the purpose of privileged and non-privileged users to bind.
There's really not much of a purpose to that anymore, anyways. It was a bigger deal when servers were multi-user and when services were diverse.