?????? Linux ?￡?????????1024 ???μ????????? root ?2??????????????????￡??????????y?????????е??????????????????????? root ????￡?????????? Linux ???????????????????????÷? root ??????е???????????????С??1024???????
???????????????Щ??????


?????????????? wordpress.com??

??????????????SetUID
?????????????ó????????λ??????? ID ????????????? root ????????У?????????ó?????????? root ?????????????????????С???????????????????????????????????е??????????????????
??????????????
????chown root.root /path/to/application
????#???SetUID
????chmod u+s /path/to/application
???????????????????￡?/usr/bin/passwd??????????????SetUID??????????????????????passwd?????????——????????/etc/passwd???????????????root????????
??????????÷?root??????г??????????????????????????????????????????????????????????????
??????????????CAP_NET_BIND_SERVICE
?????? 2.1 ?汾?????Linux ???????????????????????????????????г??????????????????????????????
???????CAP_NET_BIND_SERVICE???????????????????????root????￡?????banding????????????????
????# ????CAP_NET_BIND_SERVICE
????setcap cap_net_bind_service =+ep /path/to/application
????Note??
????1. ?????????????????Linux???????????2.1????????????????????????????????????????????
????2. ?????????????????????е????????????????????????????а????????????
???????????????Port Forwarding
???????????е?????????????????????????????????????????????ó??????????root????￡?????????1024???????????????????????????????????????????????????????????????root???е??????????????????????????????????
????# Enable the IP FORWARD kernel parameter.
????sysctl -w net.ipv4.ip_forward=1
????# Use iptables rules to redirect packets
????iptables -F -t nat
????iptables -t nat -A PREROUTING -p tcp --dport 80 -j DNAT --to:8088
????????????sysctl???????IP FORWARD????????????Red Hat/CentOS???????????????????????????sysctl????????????????????????????????????????棬?????/etc/sysctl.conf?????????
????# Default value is 0?? need change to 1.
????# net.ipv4.ip_forward = 0
????net.ipv4.ip_forward = 1
????????????м????μ?????
????# load new sysctl.conf
????sysctl -p /etc/sysctl.conf
????# or sysctl -p
????# default filename is /etc/sysctl.conf
??????????????iptables?????????????????????????????????????????80????????8088??
?????????????????????????????????????????????root????????У?????????????????????
??????????????RINETD
????????????????????????????????????????????????????????????????????????????е????????????????????????????????????????????????????????????????