From: Neil Brown <neilb@suse.de>
Date: Mon, 16 Apr 2007 01:15:40 +0000 (+1000)
Subject: Be more cautious about use for privilege ports (<1024).
X-Git-Tag: nfs-utils-1-1-0-rc2~7
X-Git-Url: https://git.decadent.org.uk/gitweb/?p=nfs-utils.git;a=commitdiff_plain;h=0210f16cf1bd2f87b7fe4336311c6dfd88030f8b;hp=0210f16cf1bd2f87b7fe4336311c6dfd88030f8b

Be more cautious about use for privilege ports (<1024).

Ports < 1024 are a scarce resource and should not be used
carelessly.  Technically they should be not used at all without
registration with IANA, but sometimes we need them despite that.

So: for the socket that RPC services listen on, don't use a <1024 port
by default.  There is no need.

For sockets that we send messages on, that are long-lived, and that might
need to appear 'privileged', avoid using a number that is registered in
/etc/services if possible.
---