Home / server / Questions / 848306
Accepted
Jonathan S. Fisher
Asked: 2017-05-05 09:20:52 +0800 CST

Does systemd allow for functionality like authbind? Where you can allow a non-root user to bind to a priv port?

  • 772

Does systemd allow for functionality like authbind? Where you can allow a non-root user to bind to a priv port?

I looked through the manpage and did quite a bit of googling, couldn't find an answer. Thank you!

systemd

1 Answers

  1. Best Answer

    You could use systemd's socket activation functionality to achieve what you want (if the program you're running supports it). Systemd binds to the port as root then passes the socket to the unprivileged program (ex. Apache).

    Also look into the AmbientCapabilities directive and CAP_NET_BIND_SERVICE.

    • 4