6 ms·
I'm a bit more worried about the security aspect of it. Let's say that we are running a server on a port which uses this option to allow multiple processes to
by Refefer 13y ago
I'm a bit more worried about the security aspect of it.
Let's say that we are running a server on a port which uses this option to allow multiple processes to bind to it. What's to prevent a rogue process, perhaps with malicious intent, from starting up and siphoning off requests willy nilly? Sounds like a great way to implement a hard to detect MITM attack.
What would be nicer, I think, is if socket reusing was bound not only to the same uid but also to the process listening to it.
- pfraze 13y agoYou can mitigate that risk by using one of the first 1024 ports, since they require root access.
- takeda64 13y agoAs I understand you need to have the same EUID to be able to bind to the same port.
- subim 13y agoThat's right. This article doesn't mention it, but the LWN article it cited (https://lwn.net/Articles/542629/ https://lwn.net/Articles/542629/) does.