Commit Briefs

Thomas Adam

introduce connection options to gotd.conf

Allow administrators to tweak the default authentication and request timeouts if needed, and to tweak the limit of concurrent connections for specific user accounts. with several tweaks from and ok op@


Thomas Adam

move "unix" pledge promise from gotd parent to auth process

The listen process now communicates the client UID/GID to the parent, and the auth process verifies this on behalf of the parent. This allows us to remove the "unix" pledge promise from the parent, removing parent access to syscalls such as listen() and accept() in the AF_UNIX domain. ok tracey@ op@


Thomas Adam

run gotd authentication in a separate child process

ok op@


Thomas Adam

getpwuid() returns NULL without setting errno if no user is found

pointed out by millert@


Thomas Adam

zap double grp.h include

spotted by Thomas


Thomas Adam

fix group membership check in gotd auth

ok op@


Thomas Adam

implement per-repository read/write authorization rules in gotd

ok op@