* disallow normal users from bind()-ing to ports
@ 2002-12-11 7:03 David Garamond
2002-12-11 15:54 ` David Garamond
0 siblings, 1 reply; 2+ messages in thread
From: David Garamond @ 2002-12-11 7:03 UTC (permalink / raw)
To: netfilter
hi,
i want to regulate local users on our non-firewalled machines:
+ normal, non-system users (uid >= 500) shall not be able to bind to any
port (so that they cannot run file-sharing applications, bypass company
proxies/mailservers and what not);
+ there are certain IP aliases (say: 12.34.56.78 and 12.34.56.79) and of
course 0.0.0.0 that should be able to be bind()-ed by normal users at all.
seeing that iptables now has --*-owner options, is it possible to
achieve this goal with iptables? or do i still have to trap the bind()
(or accept(), or listen()) syscall somehow?
--
dave
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2002-12-11 15:54 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2002-12-11 7:03 disallow normal users from bind()-ing to ports David Garamond
2002-12-11 15:54 ` David Garamond
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.