Subject: Re: tightening control on socket bind()ing
To: None <tech-security@netbsd.org>
From: Perry E. Metzger <perry@piermont.com>
List: tech-security
Date: 03/09/1999 19:49:07
Luke Mewburn <lukem@cs.rmit.edu.au> writes:
> 4. use the solution that FreeBSD use (derived from the OpenBSD
>    solution): prevent a bind if another socket on the same port is
>    bound, irregardless of whether SO_REUSE{ADDR,PORT} is set, if
>    the following is not true:
> 	* the new bind() is being done by euid==0, or
> 	* the new bind() is of a different euid to the existing socket
> 
> after discussion with a few other people, it appears that `4.' is
> probably the sanest/easiest solution; it requires no code modification
> of existing daemons, and shouldn't affect.

I like. One favor: please document this properly when you are
done. There is no documentation on any of this behavior right now,
which is Very Bad.

Perry