[Go] port 80ã‚’é–‹ã„ãŸã‚ã¨root権é™ã‚’æ¨ã¦ã‚‹webサーãƒã®ä¾‹ - Qiitaport 80ã‚’é–‹ããŸã‚ã«ã¯root権é™ãŒå¿…è¦ã ãŒã€é–‹ã„ãŸã‚ã¨ã¯ã‚»ã‚ュリティーリスクを最å°é™ã«ã™ã‚‹ãŸã‚ã«ä¸€èˆ¬ãƒ¦ãƒ¼ã‚¶æ¨©é™ã«é™æ ¼ã—ãŸã„ã€ã¨ã„ã†Webサーãƒã‚’Goã§æ›¸ã例ã§ã™ã€‚ ã€è¿½è¨˜3】 下記ã®ä¾‹ã§ã¯Linuxã§å‹•ä½œã•ã›ãŸå ´åˆã«ä¸å分ã§ã™ã€‚ Linuxã§ã¯setuidを呼ã³å‡ºã—ãŸã‚¹ãƒ¬ãƒƒãƒ‰ã«ã—ã‹åŠ¹ã‹ãªã„ã®ã§ã€ä»¥ä¸‹ã®ä¾‹ã‚’ãã®ã¾ã¾Linuxã§å‹•ã‹ã™ã¨syscall.Setuid()ã¯æˆåŠŸã—ã¾ã™ãŒã€HTTPã®Handlerã§ã¯åˆ¥ã‚¹ãƒ¬ãƒƒãƒ‰ã§å‹•ãã“ã¨ãŒã‚ã‚‹ãŸã‚ã€rootã®ã¾ã¾ã§å‹•ä½œã™ã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ã€‚ methaneã•ã‚“ã®ã‚³ãƒ¡ãƒ³ãƒˆã‚’å‚ç…§ãã ã•ã„ rootã§èµ·å‹•ã—ãŸçŠ¶æ…‹ã§":80"ã‚’listenã—㦠syscall.Setuid() ã§ä¸€èˆ¬ãƒ¦ãƒ¼ã‚¶ã«ãªã‚Š http.Serve()ã™ã‚‹ package main import ( "net" "net/http" "syscall" "log" ) func m
![[Go] port 80ã‚’é–‹ã„ãŸã‚ã¨root権é™ã‚’æ¨ã¦ã‚‹webサーãƒã®ä¾‹ - Qiita](https://cdn-ak-scissors.b.st-hatena.com/image/square/1d79dff3a499c9aac5475efe8194178ffc9d3654/height=288;version=1;width=512/https%3A%2F%2Fqiita-user-contents.imgix.net%2Fhttps%253A%252F%252Fqiita-user-contents.imgix.net%252Fhttps%25253A%25252F%25252Fcdn.qiita.com%25252Fassets%25252Fpublic%25252Farticle-ogp-background-afbab5eb44e0b055cce1258705637a91.png%253Fixlib%253Drb-4.0.0%2526w%253D1200%2526blend64%253DaHR0cHM6Ly9xaWl0YS11c2VyLXByb2ZpbGUtaW1hZ2VzLmltZ2l4Lm5ldC9odHRwcyUzQSUyRiUyRnFpaXRhLWltYWdlLXN0b3JlLnMzLmFtYXpvbmF3cy5jb20lMkYwJTJGNDUzNjUlMkZwcm9maWxlLWltYWdlcyUyRjE0NzM2OTAyNTE_aXhsaWI9cmItNC4wLjAmYXI9MSUzQTEmZml0PWNyb3AmbWFzaz1lbGxpcHNlJmZtPXBuZzMyJnM9MDBkZTE2NWU5ZTk5M2U3ZmExYWRiMTk1MTI2N2YxMjA%2526blend-x%253D120%2526blend-y%253D467%2526blend-w%253D82%2526blend-h%253D82%2526blend-mode%253Dnormal%2526s%253Df3dcfe42f4aa94b6579286e2083c56cb%3Fixlib%3Drb-4.0.0%26w%3D1200%26fm%3Djpg%26mark64%3DaHR0cHM6Ly9xaWl0YS11c2VyLWNvbnRlbnRzLmltZ2l4Lm5ldC9-dGV4dD9peGxpYj1yYi00LjAuMCZ3PTk2MCZoPTMyNCZ0eHQ9JTVCR28lNUQlMjBwb3J0JTIwODAlRTMlODIlOTIlRTklOTYlOEIlRTMlODElODQlRTMlODElOUYlRTMlODElODIlRTMlODElQThyb290JUU2JUE4JUE5JUU5JTk5JTkwJUUzJTgyJTkyJUU2JThEJUE4JUUzJTgxJUE2JUUzJTgyJThCd2ViJUUzJTgyJUI1JUUzJTgzJUJDJUUzJTgzJTkwJUUzJTgxJUFFJUU0JUJFJThCJnR4dC1hbGlnbj1sZWZ0JTJDdG9wJnR4dC1jb2xvcj0lMjMxRTIxMjEmdHh0LWZvbnQ9SGlyYWdpbm8lMjBTYW5zJTIwVzYmdHh0LXNpemU9NTYmdHh0LXBhZD0wJnM9ZWIxZjBhODdmOTdlOTIyMTgzMjg0YjMxYWQwODlkN2E%26mark-x%3D120%26mark-y%3D112%26blend64%3DaHR0cHM6Ly9xaWl0YS11c2VyLWNvbnRlbnRzLmltZ2l4Lm5ldC9-dGV4dD9peGxpYj1yYi00LjAuMCZ3PTgzOCZoPTU4JnR4dD0lNDBzZnVqaXdhcmEmdHh0LWNvbG9yPSUyMzFFMjEyMSZ0eHQtZm9udD1IaXJhZ2lubyUyMFNhbnMlMjBXNiZ0eHQtc2l6ZT0zNiZ0eHQtcGFkPTAmcz05OWZmOWNlYTNiMmQxNGRhOGYzZWQ3ZGM1ZTUyMjc5Yw%26blend-x%3D242%26blend-y%3D480%26blend-w%3D838%26blend-h%3D46%26blend-fit%3Dcrop%26blend-crop%3Dleft%252Cbottom%26blend-mode%3Dnormal%26s%3D7ce8884e1be22be2a5be8f6b478b7a2f)
fam.cx
{{#tags}}- {{label}}
{{/tags}}