One approach is to run as root, open the privileged port as soon as possible, and then permanently drop root privileges (including any privileged groups the process belongs to).

一个方法是以 root 身份运行，尽可能快地打开需要特权的端 口，然后永久去除 root 特权（包括进程所属的任何有特权的组）。

youdao

To do this, create a file called robot.txt to drop into your Web server's root directory. In the robot.txt.

要进行划分，请创建一个名为robots . txt的文件，并将该文件拉入到Web服务器的根目录下。

youdao

This allows a set-user-ID (other than root) program to drop all of its user privileges, do some un-privileged work, and then re-engage the original effective user ID in a secure manner.

这使 set-user-ID（非根）程序能够放弃它的所有用户特权，执行一些非特权操作，然后恢复原来的有效用户 ID。

youdao

They ignore the fact that crises always have a root cause, and they treat crises as if they just drop in from the sky at any moment.

FORBES: The War Against Big Banks Is A War Against Your Mind