Privbind

Small tool allowing secure running of unprivileged programs, allowing them to bind to privileged (
Download

Privbind Ranking & Summary

Advertisement

  • Rating:
  • License:
  • GPL
  • Price:
  • FREE
  • Publisher Name:
  • Shachar Shemesh
  • Publisher web site:
  • Operating Systems:
  • Mac OS X
  • File Size:
  • 311 KB

Privbind Tags


Privbind Description

Small tool allowing secure running of unprivileged programs, allowing them to bind to privileged ( Privbind is a tool for running a command as an unprivileged user, with additional reserved port binding privileges. Normally in Unix only a superuser process can bind an Internet domain socket with a privileged port (port numbers less than 1024). Accordingly, server processes are typically run with superuser privileges, which can be dropped after binding the reserved port. The privilege dropping has to be a part of the server's code. Privbind can run a server, right from the start, under an unprivileged non-root user with just one extra privilege: the server will be able to bind to reserved ports. Here are some key features of "Privbind": · It can be used when the server code cannot be trusted enough to start it as root; · It can be used when the server is written in a language without the setuid(2) feature (e.g., Java); · It can also be used to run a server written to remain running as root, while all the privileges it really needs is the ability to bind reserved ports.


Privbind Related Software