Re: Liberating locked up ports
Re: Liberating locked up ports
- Subject: Re: Liberating locked up ports
- From: "Peter Lovell" <email@hidden>
- Date: Fri, 24 Jan 2003 10:10:31 -0500
>
Is there a way to allow an application to listen on port 21 (FTP)
>
without having to run it as root? A kind of liberating the imprisoned
>
ports :-)) ?
>
>
Our FTP server is tightly integrated into our communication app and we
>
cannot make it a separate tool. And we do not want to have the complete
>
app run as root for security reasons, as well.
>
>
Thanks
>
>
Bernd
Hi Bernd,
there's no way to create a listening port on port 21 without being root.
That doesn't mean that your ftp server needs to run as root though (it
shouldn't).
The best idea is to have a small tool which creates the listening port
and then passes the socket back to the ftp server. Only the small tool
needs to be privileged, not the server itself. The scheme is ddescribed
in Stevens' "UNIX Network Programming" Vol 1 (2nd edition) about page 381.
Regards.....Peter
_______________________________________________
macnetworkprog mailing list | email@hidden
Help/Unsubscribe/Archives:
http://www.lists.apple.com/mailman/listinfo/macnetworkprog
Do not post admin requests to the list. They will be ignored.