Post #1103723
2026-04-09 17:12 UTC
@ska@social.treehouse.systems @navi@social.vlhl.dev @lanodan@queer.hacktivis.me i low key disagree. just because if someone is trying to be malicious shouldn't automatically default to "you already lost." giving up acls in this case is just the security by obscurity fallacy, it's the entire reason why you should have it.
the only thing that makes me coincide is that openrc sockets are extremely small and narrow surface so implementing it would likely just introduce even worse situations via bugs due to complexity
Replies (2)
-
@navi@social.vlhl.dev 2026-04-09 17:17
@ada @lanodan @ska also to note there's applications that don't run as root, but that do access the socket, e.g. anything started with User= / command_user= which is a thing i didn't account for actually, so i should probably chown the per-service socket when non-root is using it
-
@ska@social.treehouse.systems 2026-04-09 22:58
@ada @navi @lanodan someone is on your local machine trying to interfere with the service manager. Whether or not they succeed, you have a problem. It is good to make such an attack difficult, but I don't think it's a good use of resources or dev time to focus on hardening against that. A large space for the socket name is enough.