RGBCube/serenity
1
Fork 0
mirror of https://github.com/RGBCube/serenity synced 2025-07-28 07:07:44 +00:00
Code Issues Activity Actions

Base: Run ProtocolServer as a separate "protocol" user

Browse source 
This is probably not the final design we'll want for this, but for now
let's run the HTTP client code as a separate user to reduce exposure
for the standard "anon" user account.

Note that "protocol" is also added to the "lookup" group, in order to
allow ProtocolServer to contact LookupServer for DNS requests.
This commit is contained in:
Andreas Kling 2020-01-11 13:04:46 +01:00
parent 83f59419cd
commit d0a708fda4
3 changed files with 5 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

1
Base/etc/passwd
View file

@ -1,4 +1,5 @@
root:x:0:0:root:/:/bin/sh
lookup:x:10:10:LookupServer,,,:/:/bin/false
protocol:x:11:11:ProtocolServer,,,:/:/bin/false
anon:x:100:100:Anonymous,,,:/home/anon:/bin/sh
nona:x:200:200:Nona,,,:/home/nona:/bin/sh