From ed2492a66afdf578d1e4f99dc098ab685607b3ba Mon Sep 17 00:00:00 2001 From: Tiago Natel Date: Fri, 6 Dec 2019 13:28:05 +0000 Subject: Moved credential-related code to nxt_credential.c. This is required to avoid include cycles, as some nxt_clone_* functions depend on the credential structures, but nxt_process depends on clone structures. --- auto/sources | 1 + 1 file changed, 1 insertion(+) (limited to 'auto/sources') diff --git a/auto/sources b/auto/sources index 155e388b..33c1dcd4 100644 --- a/auto/sources +++ b/auto/sources @@ -13,6 +13,7 @@ NXT_LIB_SRCS=" \ src/nxt_mem_map.c \ src/nxt_socket.c \ src/nxt_socketpair.c \ + src/nxt_credential.c \ src/nxt_process.c \ src/nxt_process_title.c \ src/nxt_signal.c \ -- cgit From 411daeaa532c47328ab901a7ba9ea5dcd876be06 Mon Sep 17 00:00:00 2001 From: Tiago Natel Date: Fri, 6 Dec 2019 16:52:50 +0000 Subject: Isolation: allowed the use of credentials with unpriv userns. The setuid/setgid syscalls requires root capabilities but if the kernel supports unprivileged user namespace then the child process has the full set of capabilities in the new namespace, then we can allow setting "user" and "group" in such cases (this is a common security use case). Tests were added to ensure user gets meaningful error messages for uid/gid mapping misconfigurations. --- auto/sources | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'auto/sources') diff --git a/auto/sources b/auto/sources index 33c1dcd4..70d6eb8d 100644 --- a/auto/sources +++ b/auto/sources @@ -163,6 +163,12 @@ NXT_TEST_SRCS=" \ src/test/nxt_strverscmp_test.c \ " + +if [ $NXT_HAVE_CLONE_NEWUSER = YES ]; then + NXT_TEST_SRCS="$NXT_TEST_SRCS src/test/nxt_clone_test.c" +fi + + NXT_LIB_UTF8_FILE_NAME_TEST_SRCS=" \ src/test/nxt_utf8_file_name_test.c \ " -- cgit From 8677bf8d41e002310971fddbc5e45c64034afc2f Mon Sep 17 00:00:00 2001 From: Axel Duch Date: Tue, 24 Dec 2019 13:58:10 +0000 Subject: Router: introducing routing on client address. --- auto/sources | 1 + 1 file changed, 1 insertion(+) (limited to 'auto/sources') diff --git a/auto/sources b/auto/sources index 70d6eb8d..98e4a1f4 100644 --- a/auto/sources +++ b/auto/sources @@ -85,6 +85,7 @@ NXT_LIB_SRCS=" \ src/nxt_http_response.c \ src/nxt_http_error.c \ src/nxt_http_route.c \ + src/nxt_http_route_addr.c \ src/nxt_http_static.c \ src/nxt_http_proxy.c \ src/nxt_application.c \ -- cgit