Files
systemd/src/shared
networkException dcfac3a3f9 parse-helpers: allow port 0 for socket bind items
This patch adds a new parameter to parse_ip_port_range, giving callers
the option to allow ranges to have their min be 0 instead of 1.

This is then used by parse_ip_ports_token, intern used by
parse_socket_bind_item to allow port 0 when restricting bind system
calls with SocketBindDeny / SocketBindAllow.

With this, users running server software written using the golang
standard library will be able to effectively sandbox their software,
albeit with a small loss in security protections by allowing the
process to bind on a random port in the
/proc/sys/net/ipv4/ip_local_port_range.
2024-01-06 08:27:14 +09:00
..
2023-08-16 12:52:56 +02:00
2023-10-31 18:32:13 +01:00
2023-09-23 00:13:06 +08:00
2023-11-29 11:04:59 +00:00
2023-10-23 11:23:56 +01:00
2023-10-23 11:23:56 +01:00
2023-12-27 11:15:48 +01:00
2023-09-19 10:05:38 +02:00
2023-12-25 18:26:59 +01:00
2023-12-25 20:17:48 +09:00
2023-08-17 09:48:17 +02:00
2023-07-21 14:22:53 +02:00
2024-01-05 11:34:46 +01:00
2024-01-05 11:34:46 +01:00
2023-10-14 17:40:07 +02:00
2023-12-02 16:59:07 +01:00
2024-01-05 19:08:12 +09:00
2024-01-05 19:08:12 +09:00
2023-12-22 23:06:49 +08:00
2023-09-09 03:19:22 +08:00