Freebsd Non-root
Running on FreeBSD, you can use the mac_portacl(4) framework to allow a specific user ID to bind specific reserved ports.
First, find the uid of the user you are running sbbs as. Assuming the user name is “sbbs”:
id sbbs
.
Next, you need to edit /boot/loader.conf and add the line
mac_portacl_load="YES"
. Now, you need to add the following lines to /etc/sysctl.conf. Replace “1003” with the uid you found above:
security.mac.portacl.enabled=1 net.inet.ip.portrange.reservedhigh=0 security.mac.portacl.rules=\ uid:1003:tcp:11\ ,uid:1003:udp:11\ ,uid:1003:tcp:17\ ,uid:1003:udp:17\ ,uid:1003:tcp:18\ ,uid:1003:udp:18\ ,uid:1003:tcp:21\ ,uid:1003:tcp:22\ ,uid:1003:tcp:23\ ,uid:1003:tcp:25\ ,uid:1003:tcp:70\ ,uid:1003:tcp:79\ ,uid:1003:udp:79\ ,uid:1003:tcp:80\ ,uid:1003:tcp:110\ ,uid:1003:tcp:143\ ,uid:1003:tcp:513\ ,uid:1003:tcp:587\ ,uid:1003:tcp:843\ ,uid:1003:tcp:465\ ,uid:1003:tcp:995
Finally, you will need to apply the changes. Load the module using
kldload mac_portacl
then apply the sysctl.conf changes
service sysctl restart
.
Now you should be able to run SBBS as the specified user and rebind ports. Make sure you remove the User= line from the UNIX section of the sbbs.ini or you will be unable to recycle the BBS.
