RGBCube/serenity
1
Fork 0
mirror of https://github.com/RGBCube/serenity synced 2025-07-26 20:27:34 +00:00
Code Issues Activity Actions

Base: Add a "lookup" user+group that runs LookupServer

Browse source 
LookupServer now runs as lookup:lookup, allowing connections from other
members of the "lookup" group.

This is enforced through file system permissions by having the service
socket (/tmp/portal/lookup) be mode 0660.

Now the LookupServer program can't overwrite other people's files if it
starts misbehaving. That's pretty cool :^)
This commit is contained in:
Andreas Kling 2020-01-09 21:36:17 +01:00
parent 7dd03b46ee
commit f5d9f11e52
3 changed files with 4 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
Base/etc/SystemServer.ini
View file

@ -13,10 +13,11 @@ User=anon
[LookupServer]
Socket=/tmp/portal/lookup
SocketPermissions=660
Lazy=1
Priority=low
KeepAlive=1
User=anon
User=lookup
[WindowServer]
Socket=/tmp/portal/window