Server software recommendations
solderpunk
solderpunk at SDF.ORG
Thu May 14 18:38:03 BST 2020
On Thu, May 14, 2020 at 11:26:23AM -0400, Steve Ryan wrote:
> As an FYI, there's is a proposed patch[0] to add proper setuid dropping
> for Golang. It's not through yet but is in review and testing stage.
> Hopefully it'll make it in for 1.15.
Ah, good to know! Thanks very much for bringing this to my attention.
I'll keep a close eye on this and put off doing anything else with
dynamic content in Molly Brown until it's been accepted.
> Otherwise you're correct; all-thread setuid is done either through raw
> syscalls and process forking wizardry, syscalls, wrapper programs, etc.
Yeah, I'd seen a few examples of this black magic online but it didn't
seem like anything I wanted to put deep trust in.
Cheers,
Solderpunk
More information about the Gemini
mailing list