Viktor Liu
|
b0e96188b6
|
Bind the daemon unix sockets at their final mode so no chmod follows the bind
|
2026-09-16 11:20:11 +02:00 |
|
Viktor Liu
|
ca70e5389f
|
Use ipcauth.Principal for the socket restriction instead of a second principal type
|
2026-09-16 11:20:11 +02:00 |
|
Viktor Liu
|
031ed560b2
|
Refuse a socket restriction on a Windows unix socket instead of ignoring it
|
2026-09-16 11:20:11 +02:00 |
|
Viktor Liu
|
a9669d8f63
|
Bind the daemon unix sockets owner-only so a permissive umask cannot expose them
|
2026-09-16 11:20:11 +02:00 |
|
Viktor Liu
|
a64bfc3a81
|
Add an optional --allow-group flag restricting the daemon sockets to a group
|
2026-09-16 11:12:10 +02:00 |
|