PROT_SOCK
if (snum < PROT_SOCK && !capable(CAP_NET_BIND_SERVICE))
return port < PROT_SOCK;
net->ipv4.sysctl_ip_prot_sock = PROT_SOCK;
< PROT_SOCK;