Skip to content

Security: Check UID of remote socket#7777

Closed
fluffysatoshi wants to merge 1 commit intokovidgoyal:masterfrom
fluffysatoshi:socket-security
Closed

Security: Check UID of remote socket#7777
fluffysatoshi wants to merge 1 commit intokovidgoyal:masterfrom
fluffysatoshi:socket-security

Conversation

@fluffysatoshi
Copy link

This prevents remote access to Unix domain sockets when using an insecure umask or abstract sockets.

Socket permissions have no meaning for abstract sockets: the process umask(2) has no effect when binding an abstract socket.

This prevents remote access to Unix domain sockets when
using an insecure umask or abstract sockets.

Socket permissions have no meaning for abstract sockets: the process
umask(2) has no effect when binding an abstract socket.
@fluffysatoshi
Copy link
Author

Prevents access to the RC socket from different UIDs:

# sudo -u nobody kitten @ --to unix:@kitten send-text "Hello"

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant