[Zope] - A little problem...

[Anthony Baxter]

Jeff Bauer wrote:
> 
> [ Discussion about using suid to allow Zope to run on port 80 ]
> > But I don't know how I can hand over a socket like
> > that... Especially not how Zope would handle it... Any ideas?
> 
> My first response:  Does Zope need to run on port 80 at
> your site?  If you can run it on a port >1024, you will
> have a much smaller security hole.

Or better yet, if the operating system allows you to adjust the
port range that needs root, adjust that down to zero. If the machine
is a single purpose webserver with no users, there's almost no value
to the <1024 privileged port rubbish.

(all of the free unixen and Solaris 2.x^H^H^H7 can do this - probably
other modern unixen can do it too.)

Anthony
--
Anthony Baxter, NextTelecom.
email:anthony@interlink.com.au, voice: +61 416 271 170