open_socket, permission denied

Fr34k freaknetboy at yahoo.com
Tue Oct 25 20:33:51 UTC 2011


Hello,

Environment:  Solaris10 SPARC, BIND 9.8.1

Anomaly:  In our logs, we have been noticing "open_socket... permission denied..." entries.  For example,
  named[15910]: [ID 873579 daemon.warning] dispatch 2bcf50: open_socket(::#2049) -> permission denied: continuing
  named[15910]: [ID 873579 daemon.warning] dispatch 2bcb58: open_socket(0.0.0.0#2049) -> permission denied: continuing
  named[15910]: [ID 873579 daemon.warning] dispatch 2bcb58: open_socket(0.0.0.0#4045) -> permission denied: continuing

I believe 2049 and 4045 are considered privileged ports (beyond the standard <1024 ones).
According to the OS, we have these for TCP:

  # ndd /dev/tcp tcp_extra_priv_ports
  2049
  4045
  6112
And we have these for UDP:
  # ndd /dev/udp udp_extra_priv_ports
  2049
  4045

I'm not sure what the cause is and what a fix should be, if any.
Anyone?


# rpcinfo -p
   program vers proto   port  service
    100000    4   tcp    111  rpcbind
    100000    3   tcp    111  rpcbind
    100000    2   tcp    111  rpcbind
    100000    4   udp    111  rpcbind
    100000    3   udp    111  rpcbind
    100000    2   udp    111  rpcbind
#

Thank you.




More information about the bind-users mailing list