solderpunk
/
molly-brown
7
29
Fork 10
Code Issues 8 Pull Requests Releases Wiki Activity
You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
master
ratelimiting
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from 'master'
${ noResults }
molly-brown/security_other_unix.go

11 lines
222 B
Go
Raw Permalink Normal View History Unescape Escape

Use setuid() systemcall wherever possible to reduce privileges before accepting network connections. First step toward solving issue #16.
4 months ago
// +build linux,go1.16 aix darwin dragonfly freebsd illumos netbsd solaris
package main
Another big refactor, splitting the Config struct in two. The split reflects that between variables which can and cannot be overridden by .molly files, and this greatly simplifies the processing of said files, getting rid of the need for lots of ugly temporary variable thrashing.
3 months ago
func enableSecurityRestrictions(config SysConfig, ui userInfo) error {
Use setuid() systemcall wherever possible to reduce privileges before accepting network connections. First step toward solving issue #16.
4 months ago
// Setuid to an unprivileged user
Just use the log package's default logger as the error log.
4 months ago
return DropPrivs(ui)
Avoid use of log.Fatal() or os.Exit() in main so defers are guaranteed to run.
4 months ago
Use setuid() systemcall wherever possible to reduce privileges before accepting network connections. First step toward solving issue #16.
4 months ago
}