4 ms·
It was once the case on BSD that filesystem DAC bits weren't applied to AF_UNIX sockets. Can that be universally relied upon now?
by caf 10y ago
It was once the case on BSD that filesystem DAC bits weren't applied to AF_UNIX sockets. Can that be universally relied upon now?
- cyphar 10y agoI know it works on GNU/Linux, and I'm fairly sure it works on illumos (Solaris). I don't really use any of the BSDs, so I can't comment on that. Sounds like a nasty kernel bug though -- Linux implements AF_UNIX sockets as actual filesystem objects (so you go through VFS implicitly to interact with them).
- caf 10y agoIt does work on FreeBSD now at least. It wasn't a bug, though - just a questionable design (POSIX still doesn't mandate how filesystem permissions interact with connect() on AF_UNIX sockets AFAICS).