non-root low port binding possible?

[lokey]

Hi, I was wondering if it were possible to use gradm or grsec to allow non-root users (or possibly a special group) run applications that can bind to ports less than 1024?

I know that it is possible to deny sockets to certain groups, but is it possible to to the reverse and allow any sockets to a certain group?

Thanks!

-Jay

[cmouse]

Not really. it's not grsecurity only that denies non-root from binding to <1024 ports. The best method for this is to write an application that binds to the port(s) and then does setuid/setgid calls to change itself to non-root.