Re: On what versions of FreeBSD can we unreserve ports?

Patrick Proniewski wrote:
On 27 mai 2006, at 15:51, Ian G wrote:

On which versions of FreeBSD is it now possible to
un-reserve ports?


host$ sysctl net.inet.ip.portrange.reservedhigh=0



According to freebsd web site, it has first came with 5.1R (http:// www.freebsd.org/releases/5.1R/relnotes-i386.html). By the way, you might want to take a look to MAC implementation, and especially:
http://www.freebsd.org/cgi/man.cgi?query=mac_portacl&sektion=4
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/mac.html

From link above:

"It is now possible to specify the range of ``privileged ports''
(TCP and UDP ports that require superuser access to bind(2) to).
The range is now specified with the net.inet.ip.portrange.reservedlow
and net.inet.ip.portrange.reservedhigh sysctl variables, defaulting
to the traditional UNIX behavior. This feature is intended to help
network servers bind to traditionally privileged ports without
requiring superuser access. ip(4) has more details."

Thanks!

iang
_______________________________________________
freebsd-security@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@xxxxxxxxxxx"