sendnrw/netbird
2
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2026-09-22 14:49:10 +02:00
Code Issues Packages Projects Releases Wiki Activity

Refactor owner to be daemon-wide

Browse Source
This commit is contained in:
Theodor S. Midtlien
2026-07-25 18:31:39 +02:00
parent ae9ee15501
commit 14917dbc22
10 changed files with 338 additions and 73 deletions
Download Patch File Download Diff File Expand all files Collapse all files
client/server/server.go
+10 -1
View File
@@ -130,9 +130,18 @@ type Server struct {
// groupResolver resolves a Unix caller's supplementary group membership
// (NSS/getent) so gid:/group: owner principals authorize correctly. Nil on
// Windows (SID group membership travels in the identity itself); ipcauth
// Windows, where SID group membership travels in the identity itself. ipcauth
// treats a nil resolver as "no group matching".
groupResolver ipcauth.GroupResolver
// owners is the in-memory daemon-wide owner set, loaded from daemonOwnerStore.
// It governs the default profile and daemon-wide access. Non-default profiles
// stay isolated per user via their own per-profile owner. Guarded by s.mutex.
owners ipcauth.Ownership
// daemonOwnerStore persists owners to service.json, injected by cmd via
// SetDaemonOwnerStore. Nil before injection or in tests, where the daemon is
// treated as unowned and non-privileged callers are denied on the default.
daemonOwnerStore DaemonOwnerStore
}
type oauthAuthFlow struct {