I am in charge of setting up a JBoss web application that runs over SSL, thus should be accessible over port 443.
Of course, it can be started up by user with root privileges, but that is something I'd like to avoid. I'd like to run it by non-privileged user so I can strictly control everything this application does and give no more access than needed.
However, the problem is that non-privileged users can not bind to <1024 ports. I am aware of the reasons why this is so by design, however, this security principle does not let me to practice good security with my JBoss application.
What is the best way to solve this? I'd certainly like to avoid an ugly solution like binding to port 8443 instead.