]> git.decadent.org.uk Git - nfs-utils.git/commit
Be more cautious about use for privilege ports (<1024).
authorNeil Brown <neilb@suse.de>
Mon, 16 Apr 2007 01:15:40 +0000 (11:15 +1000)
committerNeil Brown <neilb@suse.de>
Mon, 16 Apr 2007 01:15:40 +0000 (11:15 +1000)
commit0210f16cf1bd2f87b7fe4336311c6dfd88030f8b
tree575be7b8a1bec8f6690e2f4c38722ec4eb0d857e
parentec79b7a3b06c034a9a71a39a5ac24b66dbd475a6
Be more cautious about use for privilege ports (<1024).

Ports < 1024 are a scarce resource and should not be used
carelessly.  Technically they should be not used at all without
registration with IANA, but sometimes we need them despite that.

So: for the socket that RPC services listen on, don't use a <1024 port
by default.  There is no need.

For sockets that we send messages on, that are long-lived, and that might
need to appear 'privileged', avoid using a number that is registered in
/etc/services if possible.
support/nfs/svc_socket.c
utils/statd/rmtcall.c
utils/statd/sm-notify.c