DataSoft/Honeyd — Issue #6: Run honeyd as normal user
Author: DataSoft
Created: 2012-02-02 21:17:23+00:00
State: open

Networked applications like honeyd should not run as root. Since any vulnerability found then becomes a full system comprimise. So instead we have to allow a normal user to run it.

Pcap as non root is accomplished using setcap();

When attempting to run honeyd as a normal user with setcap privledges honeyd will crash with the error "honeyd: bind: Address Already in Use"