unit.git - Universal Web Application Server

Age	Commit message (Collapse)	Author	Files	Lines
2019-12-06	Isolation: allowed the use of credentials with unpriv userns.	Tiago Natel	1	-1/+3
	The setuid/setgid syscalls requires root capabilities but if the kernel supports unprivileged user namespace then the child process has the full set of capabilities in the new namespace, then we can allow setting "user" and "group" in such cases (this is a common security use case). Tests were added to ensure user gets meaningful error messages for uid/gid mapping misconfigurations.
2019-12-06	Moved credential-related code to nxt_credential.c.	Tiago Natel	1	-0/+28
	This is required to avoid include cycles, as some nxt_clone_* functions depend on the credential structures, but nxt_process depends on clone structures.