Commit Briefs

365cf0f34d Stefan Sperling

move "unix" pledge promise from gotd parent to auth process

The listen process now communicates the client UID/GID to the parent, and the auth process verifies this on behalf of the parent. This allows us to remove the "unix" pledge promise from the parent, removing parent access to syscalls such as listen() and accept() in the AF_UNIX domain. ok tracey@ op@

diff | patch | tree

5e25db14db Stefan Sperling

run gotd authentication in a separate child process

ok op@

diff | patch | tree

e18d071f3c Stefan Sperling

getpwuid() returns NULL without setting errno if no user is found

pointed out by millert@

diff | patch | tree

4cad5be9f8 Omar Polo

zap double grp.h include

spotted by Thomas

diff | patch | tree

ddbe612c69 Stefan Sperling

fix group membership check in gotd auth

ok op@

diff | patch | tree

0ccf3acb6c Stefan Sperling

implement per-repository read/write authorization rules in gotd

ok op@

diff | patch | tree