also sprach Ben Hutchings <b...@decadent.org.uk> [2012.11.03.1515 +0100]:
>       int one = 1;
>       setsockopt(sock, IPPROTO_IP, IP_FREEBIND, &one, sizeof(one));
>       bind(sock, ...);
> 
> Or we set the net.ipv4.ip_nonlocal_bind sysctl globally, but this is
> probably not a good idea.  (Note that 'v4' there is not a typo; this
> would actually affect both v4 and v6.)

Generally, one should not be able to bind() non-local sockets, don't
you think?

-- 
 .''`.   martin f. krafft <madduck@d.o>      Related projects:
: :'  :  proud Debian developer               http://debiansystem.info
`. `'`   http://people.debian.org/~madduck    http://vcs-pkg.org
  `-  Debian - when you have better things to do than fixing systems
 
a farmer is a man outstanding in his field.

Attachment: digital_signature_gpg.asc
Description: Digital signature (see http://martin-krafft.net/gpg/sig-policy/999bbcc4/current)

Reply via email to