Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 10 Jul 2006 16:07:06 +0200
From:      Iang <iang@iang.org>
To:        Brian Candler <B.Candler@pobox.com>
Cc:        freebsd-security@freebsd.org, Mikhail Teterin <mi+mx@aldan.algebra.com>, imp@freebsd.org, net@freebsd.org
Subject:   Re: strange limitation on rcmd()
Message-ID:  <44B25F0A.5040709@iang.org>
In-Reply-To: <20060708213932.GA41178@uk.tiscali.com>
References:  <200607072030.01999.mi%2Bmx@aldan.algebra.com> <20060708213932.GA41178@uk.tiscali.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Brian Candler wrote:

> Note that only root can bind to reserved ports.

...

> This mechanism is only valid for trusted hosts, of course. If you allow a
> random person to put their own PC on the network, they can of course send
> packets from privileged ports (either by installing Unix with their own root
> password, or by installing DOS and sending packets which come from
> privileged ports)

I gather that it is now possible to disable the
privileged ports thing on FreeBSD at least.

(Thank heavens, I say :)

iang



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?44B25F0A.5040709>