Re: Capabilities

[Peter Benie]

Matthew Kirkwood writes ("Re: Capabilities"):
> > Capabilities don't solve the inability to change which port is bound
> > since cap_net_bind_service is equivalent to root on most machines.
> 
> Please explain?  If bind has only CNBS and runs as user "named",
> then there is no root equivalence that I can see.

If you can bind to low numbered ports, you can fake credentials for
rsh or rlogin. From there, you can get to root on many machines
without much difficulty. Even if you can't get root, CNBS is still
sufficiently powerful that I wouldn't want bind to keep running with
that capability.

Peter