Date: Sun, 28 May 2006 13:42:38 +0200 From: Ian G <iang@iang.org> To: Patrick Proniewski <patpro@patpro.net> Cc: FreeBSD Security List <freebsd-security@freebsd.org> Subject: Re: On what versions of FreeBSD can we unreserve ports? Message-ID: <44798CAE.8000602@iang.org> In-Reply-To: <458F3682-0DBB-4AC0-A300-C7C38756165A@patpro.net> References: <4478594C.6080309@iang.org> <458F3682-0DBB-4AC0-A300-C7C38756165A@patpro.net>
next in thread | previous in thread | raw e-mail | index | archive | help
Patrick Proniewski wrote: > On 27 mai 2006, at 15:51, Ian G wrote: > >> On which versions of FreeBSD is it now possible to >> un-reserve ports? > > >> host$ sysctl net.inet.ip.portrange.reservedhigh=0 > > > > According to freebsd web site, it has first came with 5.1R (http:// > www.freebsd.org/releases/5.1R/relnotes-i386.html). By the way, you > might want to take a look to MAC implementation, and especially: > http://www.freebsd.org/cgi/man.cgi?query=mac_portacl&sektion=4 > http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/mac.html From link above: "It is now possible to specify the range of ``privileged ports'' (TCP and UDP ports that require superuser access to bind(2) to). The range is now specified with the net.inet.ip.portrange.reservedlow and net.inet.ip.portrange.reservedhigh sysctl variables, defaulting to the traditional UNIX behavior. This feature is intended to help network servers bind to traditionally privileged ports without requiring superuser access. ip(4) has more details." Thanks! iang
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?44798CAE.8000602>