Xusontha to Programmer [email protected] • edit-22 years agoIt's always "temporary troubleshooting"loot.buckodr.inkimagemessage-square26fedilinkarrow-up11.12K
arrow-up11.12KimageIt's always "temporary troubleshooting"loot.buckodr.inkXusontha to Programmer [email protected] • edit-22 years agomessage-square26fedilink
minus-square@[email protected]linkfedilink5•2 years agoRecently, I learned of the concept of “Linux capabilities”. And yeah, as much as I enjoy reading up on these things, the whole time I was thinking, if something’s fucky with these capabilities, I’ll never remember to check them…
minus-square@[email protected]linkfedilink3•edit-22 years agoFunfact: if you want to run for example HTTP server, you can run it with CAP_NET_BIND_SERVICE and no_new_priv.
Recently, I learned of the concept of “Linux capabilities”. And yeah, as much as I enjoy reading up on these things, the whole time I was thinking, if something’s fucky with these capabilities, I’ll never remember to check them…
Funfact: if you want to run for example HTTP server, you can run it with CAP_NET_BIND_SERVICE and no_new_priv.