hard20 pts · first answer countslinuxsecuritycapabilities

Binding port 443 without root

A Go web server must listen on port 443, but security policy forbids running it as root. Which approach grants only what is needed?

A.Set the setuid bit on the binary so it starts as rootB.Give it CAP_NET_BIND_SERVICE, e.g. AmbientCapabilities in its unitC.Add the service user to the sudo groupD.Run it as root and drop to nobody after a minute

Discussion 0

Join free to post in the discussion.

Binding port 443 without root

Discussion 0

Related questions