Does Authbind's helper really need setuid root, or can it run with the CAP_NET_BIND_SERVICES capability and still work?
I found this excerpt in this thread titled: Bind to ports less than 1024 without root access.
I dimly remember a library called "authbind" that does what you need, by wrapping the
bind()system call (via a
LD_PRELOADlibrary), and, if a privileged port is requested, spawning a setuid root program that receives a copy of the file descriptor, then verifies the application is indeed permitted to bind to the port, performs the