mirror of
https://github.com/yggdrasil-network/yggdrasil-go.git
synced 2025-02-14 19:01:52 +00:00
83ec58afc7
After #1175 removed ioctl(2) fallback code shelling out to ifconfig(8), there is no code left (compiled on OpenBSD) that would fork(2) or execve(2). Drop the ability to run any executable file to double down on this, thus reducing the attack surface of this this experimental, internet facing daemon running as root. pledge(2) is doable, but needs more polish. unveil(2), however, is as simple as it gets. On other systems, this code is a NOOP, but can still help to implement similar safety belts. |
||
|---|---|---|
| .. | ||
| genkeys | ||
| yggdrasil | ||
| yggdrasilctl | ||