This is an old revision of the document!


Table of Contents

Linux Non-root

setcap

setcap may be used to allow Synchronet (sbbs) for Linux to run completely as non-root user by explicitly allowing the binary to bind low ports using the command-line:

sudo /sbin/setcap 'cap_net_bind_service=ep' /sbbs/exec/sbbs

This must be ran on the executable file itself (if /sbbs/exec/sbbs is a symlink, apply it to the target of the link instead). For example:

sudo setcap 'cap_net_bind_service=ep' ~/sbbs/src/sbbs3/gcc.linux.exe.release/sbbs

This will need to be re-ran any time the binary is rebuilt (and remember to properly reference .debug or .release).

This requires that the libcap2-dev package be installed prior to building sbbs (or perform a clean build of sbbs after installing libcap2-dev). See prerequisites for details.

authbind

An alternative may be to use authbind.

A detailed example should be added here.

See Also

howto/linux_non-root.1515963112.txt · Last modified: 2018/01/14 12:51 by digital man
Back to top
CC Attribution 4.0 International
Driven by DokuWiki Recent changes RSS feed Valid CSS Valid XHTML 1.0