Privilege Revocation


often you just need privilege to acquire a ressource on startup
bind to a port <1024
open a file

so, acquire the ressource, chroot if possible, and drop privilege

example: dhcpd
bpf, lease file

more: spamlogd, ping (raw socket), tcpdump, dhcrelay, ftp-proxy, traceroute, traceroute6, httpd