Quoting r. Sean Hefty <[EMAIL PROTECTED]>:
> Subject: RE: [PATCH] RDMA CM: assign port numbers when binding a cm_id to an 
> address
> 
> >One small note: ipv4 on linux does this:
> >        err = -EACCES;
> >        if (snum && snum < PROT_SOCK && !capable(CAP_NET_BIND_SERVICE))
> >                goto out;
> >
> >disabling bind to ports 1-1023 for non-priveledged users.
> >
> >Do you want to add such a check in CMA, or does it belong in SDP in your
> >opinion?
> 
> I would think this check belongs in the kernel ucma, which would require 
> adding
> it to SDP as well.
> 
> Which module is the check listed above done in?  I want to understand where 
> this
> check is made before adding it.

For ipv4 sockets it's done in net/ipv4/af_inet.c.
grep for CAP_NET_BIND_SERVICE and you'll see it for other protocols.

-- 
MST
_______________________________________________
openib-general mailing list
[email protected]
http://openib.org/mailman/listinfo/openib-general

To unsubscribe, please visit http://openib.org/mailman/listinfo/openib-general

Reply via email to