RGBCube/serenity
1
Fork 0
mirror of https://github.com/RGBCube/serenity synced 2025-07-27 04:27:45 +00:00
Code Issues Activity Actions

Base: Add a "lookup" user+group that runs LookupServer

Browse source 
LookupServer now runs as lookup:lookup, allowing connections from other
members of the "lookup" group.

This is enforced through file system permissions by having the service
socket (/tmp/portal/lookup) be mode 0660.

Now the LookupServer program can't overwrite other people's files if it
starts misbehaving. That's pretty cool :^)
This commit is contained in:
Andreas Kling 2020-01-09 21:36:17 +01:00
parent 7dd03b46ee
commit f5d9f11e52
3 changed files with 4 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

1
Base/etc/passwd
View file

@ -1,3 +1,4 @@
root:x:0:0:root:/:/bin/sh
lookup:x:10:10:LookupServer,,,:/:/bin/false
anon:x:100:100:Anonymous,,,:/home/anon:/bin/sh
nona:x:200:200:Nona,,,:/home/nona:/bin/sh