diff options
author | Laurent Bercot <ska-skaware@skarnet.org> | 2019-02-04 19:04:05 +0000 |
---|---|---|
committer | Laurent Bercot <ska-skaware@skarnet.org> | 2019-02-04 19:04:05 +0000 |
commit | e910005b1a337093109af29c7bf21b32c343ab56 (patch) | |
tree | 6b3326d5827211c99f858a56e2d4c86307e429d5 /NEWS | |
parent | fb6877e47d8a60b1e00ea55b2203589a43a610d0 (diff) | |
download | s6-e910005b1a337093109af29c7bf21b32c343ab56.tar.xz |
Revert -I, but add uid/self and gid/self to uidgid accessrules checking
Diffstat (limited to 'NEWS')
-rw-r--r-- | NEWS | 7 |
1 files changed, 5 insertions, 2 deletions
@@ -7,8 +7,11 @@ In 2.8.0.0 - Adaptation to skalibs-2.8.0.0. - s6-log can now notify readiness with the new -d option. - s6-log now has a default line limit of 8 kB. - - s6-ipcserver-access now takes a -I option to automatically accept -connections from clients running with the same euid/egid pair. + - In the accessrules library, checking against uidgid now checks the +uid/self key if the client and the server have the same uid, and the +gid/self key if the client and the server have the same gid. That means +s6-ipcserver-access can now be configured to allow/deny/specialcase +connections where the client's credentials are the same as the server's. In 2.7.2.2 |