sendnrw/netbird
2
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2026-09-14 02:39:06 +02:00
Code Issues Packages Projects Releases Wiki Activity
3,357 Commits 567 Branches 367 Tags
restrict-daemon-socket
Commit Graph
6 Commits
Author SHA1 Message Date
Viktor Liu 27e732872e Assert the umask is restored after each bind, from a nonzero caller umask 2026-09-09 12:21:57 +02:00
Viktor Liu 5d7fb3288b Bind the daemon unix sockets at their final mode so no chmod follows the bind 2026-09-09 11:47:22 +02:00
Viktor Liu 2064b2a0bd Use ipcauth.Principal for the socket restriction instead of a second principal type 2026-09-09 10:16:54 +02:00
Viktor Liu b0c1425288 Bind the daemon unix sockets owner-only so a permissive umask cannot expose them 2026-09-09 09:48:38 +02:00
Viktor Liu 9a24fbe95f Apply the socket restriction before serving and fail closed on an unusable one 2026-09-09 09:31:48 +02:00
Viktor Liu b49b5494b4 Add an optional --allow-group flag restricting the daemon sockets to a group 2026-09-08 18:14:41 +02:00