I am certain you can find it yourself.

Gustavo Rios <rios.gust...@gmail.com> wrote:

> may some here points me where rpcbind is implemented ? I would like to see 
> the C code
> of it.
> Thanks.
> 
> Em sex., 17 de jun. de 2022 às 00:20, Theo de Raadt <dera...@openbsd.org> 
> escreveu:
> 
>  Gustavo Rios <rios.gust...@gmail.com> wrote:
> 
>  > Hi folks!
>  > 
>  > How does openbsd rpcbind prevent ordinary users to unset a given rpc port
>  > mapping registered by, for instance, the root user ?
> 
>  Poorly.
> 
>  It will only allow local root (who request upon a reserved port) to touch
>  ports which are reserved (< 1024), and 2049 is treated the same way.
> 
>  If root wants safe RPC, it needs to use reserved ports.
> 
>  Please don't bring up the argument that reserved ports are an outdated
>  concept, it is obvious right here they aren't.
> 
>  It is difficult to improve the RPC ecosystem, it kind of is what it is,
>  and noone new services use it.
> 
> -- 
> The lion and the tiger may be more powerful, but the wolves do not perform in 
> the
> circus
> 

Reply via email to