Menu ▾ ▴

#13 drop root privileges at startup

closed
nobody
None
Feature Request
2015-11-25
2015-06-01
Richard Hansen
No

IANA assigned TCP ports 323 and 324 for rpki-rtr, which means that root privileges are required to listen. For improved security, RPSTIR's rpki-rtr daemon should drop root privileges after bind()ing.

The UID to drop to should be configurable, defaulting to nobody or the main rpstir user.

Starting points:

  • bin/rpki-rtr/main.c
  • lib/config/config.h (for configurability)

Discussion

  • Richard Hansen

    Richard Hansen - 2015-06-01
    • Description has changed:

    Diff:

    --- old
+++ new
@@ -1,4 +1,4 @@
-IANA assigned TCP ports 323 and 324 for rpki-rtr, which means that root privileges are required to listen.  For improved security, RPSTIR should drop root privileges after `bind()`ing.
+IANA assigned TCP ports 323 and 324 for rpki-rtr, which means that root privileges are required to listen.  For improved security, RPSTIR's rpki-rtr daemon should drop root privileges after `bind()`ing.

 The UID to drop to should be configurable, defaulting to `nobody` or the main `rpstir` user.
     

  • David Mandelberg

    David Mandelberg - 2015-06-08
    • status: unread --> in-progress
     

  • David Mandelberg

    David Mandelberg - 2015-11-25
    • status: in-progress --> closed
     

  • David Mandelberg

    David Mandelberg - 2015-11-25

    Migrated to github.

     
veeam logo