4 ms·
And I preemptively agreed with you: > cruft to strip out > rewriting certain parts of their code to have explicit privilege separation I was unaware that thi
by _jal 6y ago
And I preemptively agreed with you:
> cruft to strip out
> rewriting certain parts of their code to have explicit privilege separation
I was unaware that this was the goal. If it is, that's a better explanation for changing things than I've heard elsewhere.
Still doesn't explain why it should be a daemon instead of a helper binary.
- stonogo 6y agoIt's a daemon so it can monitor the routing sockets for messages from dhcp/slaac/etc utilities that send updates. If it were a helper binary it would violate the privsep efforts.