Mirrors/yggdrasil-go
1
0
Fork 0
mirror of https://github.com/yggdrasil-network/yggdrasil-go.git synced 2026-05-22 13:56:30 +03:00
Code Issues Packages Projects Releases Wiki Activity

Change ownership of admin socket before dropping permissions (#1336)

Browse Source 
This is to allow access to the socket by members of the group that
permissions are dropped to.
This commit is contained in:
state-plumber
2026-05-12 20:39:55 +00:00
committed by GitHub
parent be5daeba7a
commit aaf263957b
4 changed files with 22 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
cmd/yggdrasil/chuser_unix_test.go
View File

@@ -9,21 +9,21 @@ import (
// Usernames must not contain a number sign.
func TestEmptyString(t *testing.T) {
if chuser("") == nil {
if chuser("", "") == nil {
t.Fatal("the empty string is not a valid user")
}
}
// Either omit delimiter and group, or omit both.
func TestEmptyGroup(t *testing.T) {
if chuser("0:") == nil {
if chuser("0:", "") == nil {
t.Fatal("the empty group is not allowed")
}
}
// Either user only or user and group.
func TestGroupOnly(t *testing.T) {
if chuser(":0") == nil {
if chuser(":0", "") == nil {
t.Fatal("group only is not allowed")
}
}
@@ -31,14 +31,14 @@ func TestGroupOnly(t *testing.T) {
// Usenames must not contain the number sign.
func TestInvalidUsername(t *testing.T) {
const username = "#user"
if chuser(username) == nil {
if chuser(username, "") == nil {
t.Fatalf("'%s' is not a valid username", username)
}
}
// User IDs must be non-negative.
func TestInvalidUserid(t *testing.T) {
if chuser("-1") == nil {
if chuser("-1", "") == nil {
t.Fatal("User ID cannot be negative")
}
}
@@ -54,7 +54,7 @@ func TestCurrentUserid(t *testing.T) {
t.Skip("setgroups(2): Only the superuser may set new groups.")
}
if err = chuser(usr.Uid); err != nil {
if err = chuser(usr.Uid, ""); err != nil {
t.Fatal(err)
}
}
@@ -70,7 +70,7 @@ func TestCommonUsername(t *testing.T) {
t.Skip("setgroups(2): Only the superuser may set new groups.")
}
if err := chuser("nobody"); err != nil {
if err := chuser("nobody", ""); err != nil {
if _, ok := err.(user.UnknownUserError); ok {
t.Skip(err)
}