Skip to content
This repository has been archived by the owner on Mar 15, 2019. It is now read-only.

Allow specification of drop_privileges user and group in configuration #203

Open
cmsmith1977 opened this issue Sep 9, 2014 · 4 comments

Comments

@cmsmith1977
Copy link

It would be nice to be able to specify the drop_privileges user and group in the beeswarmcfg.json

@johnnykv
Copy link
Member

Dropping privileges has been removed in the latest release, in essence the problem is that if we drop privileges on the drones they cannot bind to ports below 1024 anymore. One workaround would be using linux capabilities as described in #199.

@cmsmith1977
Copy link
Author

That will work!

You can also setup iptables rules (in Linux) to forward the low number ports to high number ports and set beeswarm to use high number ports.

@johnnykv
Copy link
Member

One of the problems with port forwarding is that the Beeswarm system will loose track of the original ports - and that will make it impossible for the Beeswarm server to correlate honeypot sessions and client session.

@cmsmith1977
Copy link
Author

using iptables is not really port forwarding, rather port re-writing so the source ports remain unchanged.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants