[devel] [PATCH hasher-priv v1 0/3] Make a daemon from the hasher-priv

Alexey Gladkov legion на altlinux.ru
Пн Мар 16 13:34:47 MSK 2020


On Fri, Dec 13, 2019 at 12:42:02PM +0100, Alex Gladkov wrote:
> From: Alexey Gladkov <legion на altlinux.org>
> 
> The hasher-priv is a SUID utility. This is not good. Separation of the
> server and client parts will allow us to remove SUID flag.
> 
> The separation of server and client is not intended to give clients
> access over the network. This separation is only necessary to distinguish
> privileges. Only UNIX domain socket is used.
> 
> A separate session process is created for each connected user. Each such
> process ends after a certain period of inactivity.

Gently remind about patches.

> Alexey Gladkov (3):
>   Make a daemon from the hasher-priv
>   Add systemd and sysvinit service files
>   Add cgroup support
> 
>  hasher-priv/.gitignore            |   1 +
>  hasher-priv/DESIGN                | 281 +++++++++++++--------
>  hasher-priv/Makefile              |  34 ++-
>  hasher-priv/caller.c              |  81 +++---
>  hasher-priv/caller_server.c       | 373 ++++++++++++++++++++++++++++
>  hasher-priv/caller_task.c         | 217 +++++++++++++++++
>  hasher-priv/cgroup.c              | 119 +++++++++
>  hasher-priv/cmdline.c             |  27 +-
>  hasher-priv/communication.c       | 392 ++++++++++++++++++++++++++++++
>  hasher-priv/communication.h       |  77 ++++++
>  hasher-priv/config.c              | 148 ++++++++++-
>  hasher-priv/epoll.c               |  39 +++
>  hasher-priv/epoll.h               |  18 ++
>  hasher-priv/hasher-priv.c         |  78 ++++++
>  hasher-priv/hasher-privd.c        | 375 ++++++++++++++++++++++++++++
>  hasher-priv/hasher-privd.service  |  11 +
>  hasher-priv/hasher-privd.sysvinit |  86 +++++++
>  hasher-priv/io_log.c              |   2 +-
>  hasher-priv/io_x11.c              |   2 +-
>  hasher-priv/killuid.c             |   2 +-
>  hasher-priv/logging.c             |  64 +++++
>  hasher-priv/logging.h             |  55 +++++
>  hasher-priv/main.c                |  75 ------
>  hasher-priv/pass.c                | 117 ++++++++-
>  hasher-priv/pidfile.c             | 128 ++++++++++
>  hasher-priv/pidfile.h             |  44 ++++
>  hasher-priv/priv.h                |  35 ++-
>  hasher-priv/server.conf           |  22 ++
>  hasher-priv/sockets.c             | 183 ++++++++++++++
>  hasher-priv/sockets.h             |  32 +++
>  hasher-priv/x11.c                 |   1 +
>  31 files changed, 2872 insertions(+), 247 deletions(-)
>  create mode 100644 hasher-priv/caller_server.c
>  create mode 100644 hasher-priv/caller_task.c
>  create mode 100644 hasher-priv/cgroup.c
>  create mode 100644 hasher-priv/communication.c
>  create mode 100644 hasher-priv/communication.h
>  create mode 100644 hasher-priv/epoll.c
>  create mode 100644 hasher-priv/epoll.h
>  create mode 100644 hasher-priv/hasher-priv.c
>  create mode 100644 hasher-priv/hasher-privd.c
>  create mode 100644 hasher-priv/hasher-privd.service
>  create mode 100755 hasher-priv/hasher-privd.sysvinit
>  create mode 100644 hasher-priv/logging.c
>  create mode 100644 hasher-priv/logging.h
>  delete mode 100644 hasher-priv/main.c
>  create mode 100644 hasher-priv/pidfile.c
>  create mode 100644 hasher-priv/pidfile.h
>  create mode 100644 hasher-priv/server.conf
>  create mode 100644 hasher-priv/sockets.c
>  create mode 100644 hasher-priv/sockets.h
> 
> -- 
> 2.24.0

-- 
Rgrds, legion



Подробная информация о списке рассылки Devel