undefined | Better HN

0 pointstingletech1d ago0 comments

is that no longer true?

0 comments

No, now you have the option of using CAP_NET_BIND_SERVICE

There is also net.ipv4.ip_unprivileged_port_start

jcgl1d ago

If the application supports it, there’s also systemd socket activation (or traditional inetd sorta stuff too if that fits)

j / k navigate · click thread line to collapse

No, now you have the option of using CAP_NET_BIND_SERVICE

There is also net.ipv4.ip_unprivileged_port_start

jcgl1d ago

If the application supports it, there’s also systemd socket activation (or traditional inetd sorta stuff too if that fits)

j / k navigate · click thread line to collapse