Re: Proposal to automatically make the owner/user of an accepted socket the current process
Emmanuel Nyarko <[email protected]> Fri, 6 Jun 2025 02:30:03 +0000
| Newsgroups | gmane.os.netbsd.devel.kernel,gmane.os.netbsd.devel.network |
|---|---|
| Message-ID | <[email protected]> |
Emmanuel > On 6 Jun 2025, at 1:43 AM, Jason Thorpe <[email protected]> wrote: > > > >> On Jun 5, 2025, at 9:36 AM, Emmanuel Nyarko <[email protected]> wrote: >> >> Errmmm, I was thinking that it maybe becomes a default behavior. >> >> I mean every socket should be owned by the process that the socket was created for. > > This actually seems not that great. It’s de rigueur to have a more privileged process create a socket (or other sort of file descriptor) in a controlled fashion to pass off to a less-privileged process. This should be opt-in behavior on a per-file descriptor basis. Yep, UNIX socket behavior. And so far hearing from you guys, I now know it’s a bad idea to make it a default behavior. So an opt-in behavior with socket options. Just adding an extension for that. > > -- thorpej >