ndhc/sockd.h

// Copyright 2018 Nicholas J. Kain <njkain at gmail dot com>
// SPDX-License-Identifier: MIT
#ifndef NDHC_SOCKD_H_
#define NDHC_SOCKD_H_

extern uid_t sockd_uid;
extern gid_t sockd_gid;
int request_sockd_fd(char *buf, size_t buflen, char *response);
void sockd_main(void);

#endif
Relicense as MIT. It's a lot more common than BSD 2-clause it is both compatible and nearly identical in effect. 2022-02-07 06:35:29 +05:30			`// Copyright 2018 Nicholas J. Kain <njkain at gmail dot com>`
			`// SPDX-License-Identifier: MIT`
Introduce a ndhc-sockd daemon that separates out the remaining elevated capabilities from the ndhc master process. Privsep is now complete. The only notable improvement from before is that exploitation of ndhc would only allow an attacker to open raw sockets, bind sockets to ports < port 1024, and create broadcast sockets on the interface that ndhc is performing dhcp on rather than on all interfaces. However, this seems like a worthwhile change; note that it was already impossible for an attacker to sniff packets on any interfaces (as that requires CAP_NET_ADMIN, which was always separated to ifch). 2014-04-04 13:42:25 +05:30			`#ifndef NDHC_SOCKD_H_`
			`#define NDHC_SOCKD_H_`

			`extern uid_t sockd_uid;`
			`extern gid_t sockd_gid;`
Replace mostly obsolete -[static 1] with reliable old *-. This notation originally had the sole advantage of implying that the pointer was non-NULL, but it has seen little use and now clang presents warnings about it in certain contexts. 2022-01-12 09:05:19 +05:30			`int request_sockd_fd(char buf, size_t buflen, char response);`
Introduce a ndhc-sockd daemon that separates out the remaining elevated capabilities from the ndhc master process. Privsep is now complete. The only notable improvement from before is that exploitation of ndhc would only allow an attacker to open raw sockets, bind sockets to ports < port 1024, and create broadcast sockets on the interface that ndhc is performing dhcp on rather than on all interfaces. However, this seems like a worthwhile change; note that it was already impossible for an attacker to sniff packets on any interfaces (as that requires CAP_NET_ADMIN, which was always separated to ifch). 2014-04-04 13:42:25 +05:30			`void sockd_main(void);`

Relicense as MIT. It's a lot more common than BSD 2-clause it is both compatible and nearly identical in effect. 2022-02-07 06:35:29 +05:30			`#endif`