Re: Disallowing user access to "listening" ports.

Alexander Viro (viro@math.psu.edu)
Mon, 11 Jan 1999 17:18:23 -0500 (EST)


On Mon, 11 Jan 1999, Amanda Shuler wrote:

> I apologize advance for my extreme lack of knowledge in linux development
> of any kind. I am only presuming to post to this list under the advice of
> a friend.
>
> I want to make it impossible for daemons to be started under any UID
> that is greater than 100, except for UID 65534.
>
> Some suggested that I make a patch for my kernel that would do something
> such as:
>
> if UID > 100 and UID != 65534
> then "do not open socket"

... which means that your lusers will be unable to use email, news, FTP
*and* HTTP (i.e. no web for them). Is that *really* the thing you want?

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/