Home / server / Questions / 388113
Accepted
Nick Bruun
Asked: 2012-05-11 17:44:10 +0800 CST

Limit which ports a user can bind

  • 772

I'm working on a setup for a Linux based system in which user applications are executed in Linux Containers to provide confinement and limited capabilities. Each application is launched under in a container with a specific user ID.

Now, given that some of these applications are going to have server roles, I would like to be able to control which ports a specific user can bind (both TCP and UDP). One solution is manually polling /proc/net/(tcp|udp)6? but this is very inefficient for obvious reasons. So, I was wondering if there is a better way to do this?

linux port users bind

2 Answers

  1. Best Answer

    AppArmor and SELinux can be used to restrict network access by processes.

    • 1

  2. There is also iptables user match.

    • 1