Re: Proposal to automatically make the owner/user of an accepted socket the current process

Emmanuel Nyarko <[email protected]> Fri, 6 Jun 2025 02:30:03 +0000
Newsgroups gmane.os.netbsd.devel.kernel,gmane.os.netbsd.devel.network
Message-ID <[email protected]>
Emmanuel

> On 6 Jun 2025, at 1:43 AM, Jason Thorpe <[email protected]> wrote:
> 
> 
> 
>> On Jun 5, 2025, at 9:36 AM, Emmanuel Nyarko <[email protected]> wrote:
>> 
>> Errmmm, I was thinking that it maybe becomes a default behavior.
>> 
>> I mean every socket should be owned by the process that the socket was created for.
> 
> This actually seems not that great.  It’s de rigueur to have a more privileged process create a socket (or other sort of file descriptor) in a controlled fashion to pass off to a less-privileged process.  This should be opt-in behavior on a per-file descriptor basis.

Yep, UNIX socket behavior. And so far hearing from you guys, I now know it’s a bad idea to make it a default behavior. So an opt-in behavior with socket options. Just adding an extension for that. 
> 
> -- thorpej
>