Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Linux: Re-introduce D-Bus API Authorization #7110

Merged
merged 13 commits into from Jul 26, 2023
Merged

Linux: Re-introduce D-Bus API Authorization #7110

merged 13 commits into from Jul 26, 2023

Commits on Jul 12, 2023

  1. PoC: Check for CAP_NET_ADMIN to auth D-Bus calls.

    @oskirby
    oskirby committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    cae7ee1 View commit details
    Browse the repository at this point in the history

  2. Add libcap as a build dependency

    @oskirby
    oskirby committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    b3c8125 View commit details
    Browse the repository at this point in the history

  3. Also permit D-Bus access if made by the same binary

    @oskirby
    oskirby committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    f1852f3 View commit details
    Browse the repository at this point in the history

  4. Require D-Bus authorization for controller APIs

    @oskirby
    oskirby committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    42e70a2 View commit details
    Browse the repository at this point in the history

  5. Tidy up some debug

    @oskirby
    oskirby committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    517b660 View commit details
    Browse the repository at this point in the history

  6. Tidy up some lint

    @oskirby
    oskirby committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    2241ce5 View commit details
    Browse the repository at this point in the history

  7. Fix build failures on Ubuntu/focal

    @oskirby
    oskirby committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    51f12c2 View commit details
    Browse the repository at this point in the history

  8. Permit API calls originating from the daemon itself.

    @oskirby
    oskirby committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    df166fa View commit details
    Browse the repository at this point in the history

  9. Drop daemon permissions after launch.

    @oskirby
    oskirby committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    58acf1a View commit details
    Browse the repository at this point in the history

  10. Apply auth check to split tunneling APIs too

    @oskirby
    oskirby committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    15f5dc3 View commit details
    Browse the repository at this point in the history

  11. Restrict API access by UID instead of executable path

    @oskirby
    oskirby committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    31d3656 View commit details
    Browse the repository at this point in the history

Commits on Jul 13, 2023

  1. A wee spot of lint

    @oskirby
    oskirby committed Jul 13, 2023
    Configuration menu
    Copy the full SHA
    61e2813 View commit details
    Browse the repository at this point in the history

Commits on Jul 24, 2023

  1. Add some const correctness and tweak function names

    @oskirby
    oskirby committed Jul 24, 2023
    Configuration menu
    Copy the full SHA
    754a202 View commit details
    Browse the repository at this point in the history