
LookupServer now runs as lookup:lookup, allowing connections from other members of the "lookup" group. This is enforced through file system permissions by having the service socket (/tmp/portal/lookup) be mode 0660. Now the LookupServer program can't overwrite other people's files if it starts misbehaving. That's pretty cool :^)
4 lines
159 B
Text
4 lines
159 B
Text
root:x:0:0:root:/:/bin/sh
|
|
lookup:x:10:10:LookupServer,,,:/:/bin/false
|
|
anon:x:100:100:Anonymous,,,:/home/anon:/bin/sh
|
|
nona:x:200:200:Nona,,,:/home/nona:/bin/sh
|