{"action":"created","issue":{"url":"https://api.github.com/repos/indutny/bud/issues/67","labels_url":"https://api.github.com/repos/indutny/bud/issues/67/labels{/name}","comments_url":"https://api.github.com/repos/indutny/bud/issues/67/comments","events_url":"https://api.github.com/repos/indutny/bud/issues/67/events","html_url":"https://github.com/indutny/bud/issues/67","id":89841017,"number":67,"title":"Bud binds after dropping privileges","user":{"login":"phillipp","id":766631,"avatar_url":"https://avatars.githubusercontent.com/u/766631?v=3","gravatar_id":"","url":"https://api.github.com/users/phillipp","html_url":"https://github.com/phillipp","followers_url":"https://api.github.com/users/phillipp/followers","following_url":"https://api.github.com/users/phillipp/following{/other_user}","gists_url":"https://api.github.com/users/phillipp/gists{/gist_id}","starred_url":"https://api.github.com/users/phillipp/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/phillipp/subscriptions","organizations_url":"https://api.github.com/users/phillipp/orgs","repos_url":"https://api.github.com/users/phillipp/repos","events_url":"https://api.github.com/users/phillipp/events{/privacy}","received_events_url":"https://api.github.com/users/phillipp/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":16,"created_at":"2015-06-21T00:38:54Z","updated_at":"2015-07-01T21:21:53Z","closed_at":null,"body":"Hi,\r\nthanks for your great work!\r\n\r\nI have noticed that if I run bud with privilege dropping enabled that it appears to bind *after* dropping privileges. So it is not possible to use bud on port 443 without running as root, but that's IMHO not acceptable for a public facing server.\r\n\r\nI thought that it would be possible to bind to 1443 and forward the packets with iptables, but that sounds like a crazy hack to me. I'd rather see that bud can listen on 443 and drop privileges. Is that possible or is there a special problem that prevents bud from doing so?\r\n\r\n\r\nBtw the output with the `user` config option set looks like this:\r\n```\r\n(dbg) [15057] master starting\r\nuv_tcp_bind(server) returned -13\r\npermission denied\r\n```"},"comment":{"url":"https://api.github.com/repos/indutny/bud/issues/comments/117827947","html_url":"https://github.com/indutny/bud/issues/67#issuecomment-117827947","issue_url":"https://api.github.com/repos/indutny/bud/issues/67","id":117827947,"user":{"login":"indutny","id":238531,"avatar_url":"https://avatars.githubusercontent.com/u/238531?v=3","gravatar_id":"","url":"https://api.github.com/users/indutny","html_url":"https://github.com/indutny","followers_url":"https://api.github.com/users/indutny/followers","following_url":"https://api.github.com/users/indutny/following{/other_user}","gists_url":"https://api.github.com/users/indutny/gists{/gist_id}","starred_url":"https://api.github.com/users/indutny/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/indutny/subscriptions","organizations_url":"https://api.github.com/users/indutny/orgs","repos_url":"https://api.github.com/users/indutny/repos","events_url":"https://api.github.com/users/indutny/events{/privacy}","received_events_url":"https://api.github.com/users/indutny/received_events","type":"User","site_admin":false},"created_at":"2015-07-01T21:21:53Z","updated_at":"2015-07-01T21:21:53Z","body":"wtf :) `strace openssl s_client -connect 127.0.0.1:443`?"}}