Stuart Herbert | Gentoo

AccessFS from Olaf Dietsche caught my interest in today’s Linux Weekly News. It allows the system administrator to restrict access to a network port based on user/groupid, so that daemons no longer need to run as the root user.

This is one of the examples included in the patch:

# mount -t accessfs none /proc/access
# chown www /proc/access/net/ip/bind/80
# chown mail /proc/access/net/ip/bind/25

I haven’t had chance to try it (and don’t know if I ever will), but it looked like an interesting idea.