On Thu, 28 Jan 2010 20:04:25 +0100
Jean-Frangois SIMON <[email protected]> wrote:

> Hi List,
>
> I am using vsftpd as ftp daemon. I actually launch this service as
> root (sudo /usr/...) because this is the only way it actually starts.
> Is this normal way or do I miss something ?
> I don't see that it drops its privileges, through "top", I see it
> running as root.
>
> Regards

ftp uses port 20 and 21.
ports below 1024 need root priviliges to bind to.
so yes, that is "normal".
sane applications that need those ports drop the root privs or
use different processes for different stuff, read privilege seperation.
vsftpd implements that.

- Robert

Reply via email to