Linux Non-root

setcap may be used to allow Synchronet (sbbs) for Linux to run completely as non-root user by explicitly allowing the binary to bind low ports using the command-line:

sudo /sbin/setcap 'cap_net_bind_service=ep' /sbbs/exec/sbbs

This must be ran on the executable file itself (if /sbbs/exec/sbbs is a symlink, apply it to the target of the link instead). For example:

sudo setcap 'cap_net_bind_service=ep' ~/sbbs/src/sbbs3/gcc.linux.exe.release/sbbs

This will need to be re-ran any time the binary is rebuilt (and remember to properly reference .debug or .release).

This requires that the libcap2-dev package be installed prior to building sbbs (or perform a clean build of sbbs after installing libcap2-dev). See prerequisites for details.

An alternative may be to use authbind.

A detailed example should be added here.

• howto index