Why can only root listen to ports below 1024?

mikaelstaldal · 02-24-2008, 04:04 PM

A new article entry has been added:

Why can only root listen to ports below 1024?

Quote:

In Linux, and other UNIX-like systems, you have to be root (have superuser privileges) in order to listen to TCP or UDP ports below 1024 (the well-known ports).
This port 1024 limit is a security measure. But it is based on an obsolete security model and today it only gives a false sense of security and contributes to security holes. Therefore, it should be removed. As soon as possible.

billymayday · 02-26-2008, 02:17 AM

Quote:

Today the typical Linux machine is not used in a way which makes the port 1024 limit relevant. We tend to use it as a desktop client (workstation) with only one user which has superuser access via sudo.

Which distros other than the Ubuntu family follow this model? Might be popular, but typical?

chrism01 · 07-09-2008, 02:34 AM

There's a lot of Linux servers out there, and more being installed all the time.
In fact, many articles have posited that the main incursion is to replace other Unix servers, rather than MS...