solderpunk
/
molly-brown
7
29
Fork 10
Code Issues 9 Pull Requests Releases Wiki Activity
molly-brown/security_other_unix.go

11 lines
222 B
Go
Raw Normal View History

Use setuid() systemcall wherever possible to reduce privileges before accepting network connections. First step toward solving issue #16.
2023-02-13 19:26:52 +00:00
// +build linux,go1.16 aix darwin dragonfly freebsd illumos netbsd solaris
package main
Another big refactor, splitting the Config struct in two. The split reflects that between variables which can and cannot be overridden by .molly files, and this greatly simplifies the processing of said files, getting rid of the need for lots of ugly temporary variable thrashing.
2023-02-25 10:29:13 +00:00
func enableSecurityRestrictions(config SysConfig, ui userInfo) error {
Use setuid() systemcall wherever possible to reduce privileges before accepting network connections. First step toward solving issue #16.
2023-02-13 19:26:52 +00:00
// Setuid to an unprivileged user
Just use the log package's default logger as the error log.
2023-02-19 14:04:34 +00:00
return DropPrivs(ui)
Avoid use of log.Fatal() or os.Exit() in main so defers are guaranteed to run.
2023-02-19 13:40:54 +00:00
Use setuid() systemcall wherever possible to reduce privileges before accepting network connections. First step toward solving issue #16.
2023-02-13 19:26:52 +00:00
}