Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 24 Jan 2005 22:43:05 +0100
From:      Hexren <me@hexren.net>
To:        Danny <nocmonkey@gmail.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re[2]: sshd port number ?
Message-ID:  <1120420172.20050124224305@hexren.net>
In-Reply-To: <addc34c605012413236265f063@mail.gmail.com>
References:  <20050124210109.GA14171@SDF.LONESTAR.ORG> <12318458361.20050124221023@hexren.net> <addc34c605012413236265f063@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
D> On Mon, 24 Jan 2005 22:10:23 +0100, Hexren <me@hexren.net> wrote:
>> If ssh ever goes down, a user could start his own compromised
>> version of ssh and do some nasty stuff. The same user could not do
>> that if the connecting side would expect sshd to be on a privileged
>> port because the system ensures that only procs running with superuser
>> privileges can bind to a privileged port.

D> At the OS level (not the SSHD config for example), where can one
D> configure what proc is assigned to what privileged port?

D> I just did some quick searching, but does this documentation exist on
D> the FreeBSD site?

D> Thank you,

D> ...D

---------------------------------------------

/etc/services
http://www.freebsd.org/cgi/man.cgi?query=services&apropos=0&sektion=0&manpath=FreeBSD+5.3-RELEASE+and+Ports&format=html

But that is only a database. The system does not enforce what binds to
what port. If the superuser does want <something> to bind to <port> the
systems standpoint in that is: Root is right.

Hexren



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1120420172.20050124224305>