molly-brown/security_other_unix.go

// +build linux,go1.16 aix darwin dragonfly freebsd illumos netbsd solaris

package main

func enableSecurityRestrictions(config SysConfig, ui userInfo) error {

	// Setuid to an unprivileged user
	return DropPrivs(ui)

}
Use setuid() systemcall wherever possible to reduce privileges before accepting network connections. First step toward solving issue #16. 2023-02-13 20:26:52 +01:00			`// +build linux,go1.16 aix darwin dragonfly freebsd illumos netbsd solaris`

			`package main`

Another big refactor, splitting the Config struct in two. The split reflects that between variables which can and cannot be overridden by .molly files, and this greatly simplifies the processing of said files, getting rid of the need for lots of ugly temporary variable thrashing. 2023-02-25 11:29:13 +01:00			`func enableSecurityRestrictions(config SysConfig, ui userInfo) error {`
Use setuid() systemcall wherever possible to reduce privileges before accepting network connections. First step toward solving issue #16. 2023-02-13 20:26:52 +01:00
			`// Setuid to an unprivileged user`
Just use the log package's default logger as the error log. 2023-02-19 15:04:34 +01:00			`return DropPrivs(ui)`
Avoid use of log.Fatal() or os.Exit() in main so defers are guaranteed to run. 2023-02-19 14:40:54 +01:00
Use setuid() systemcall wherever possible to reduce privileges before accepting network connections. First step toward solving issue #16. 2023-02-13 20:26:52 +01:00			`}`