💾 Archived View for rawtext.club › ~sloum › geminilist › 000609.gmi captured on 2020-10-31 at 01:41:58. Gemini links have been rewritten to link to archived content

-=-=-=-=-=-=-

Server software recommendations

solderpunk solderpunk at SDF.ORG

Thu May 14 18:38:03 BST 2020

- - - - - - - - - - - - - - - - - - - ```

On Thu, May 14, 2020 at 11:26:23AM -0400, Steve Ryan wrote: 
> As an FYI, there's is a proposed patch[0] to add proper setuid dropping
> for Golang. It's not through yet but is in review and testing stage.
> Hopefully it'll make it in for 1.15.

Ah, good to know!  Thanks very much for bringing this to my attention.I'll keep a close eye on this and put off doing anything else withdynamic content in Molly Brown until it's been accepted.

> Otherwise you're correct; all-thread setuid is done either through raw
> syscalls and process forking wizardry, syscalls, wrapper programs, etc.

Yeah, I'd seen a few examples of this black magic online but it didn'tseem like anything I wanted to put deep trust in.

Cheers,Solderpunk