JsCommunity / JsCommunity/http-server-plus
No way to set permissions on UNIX socket
Nobody has claimed this yet.
- Dominant language
- JavaScript
- Stars
- 3
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Description
You can set permissions on the socket using the second callback argument on the listen function but a user of this library has no way of doing that. This makes the socket feature quite useless unless you run the server as the same user as the proxying server, which is far from ideal.
I'm not a Node.js guy, I just want to set up Xen Orchestra in a secure manner.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start at the library's listen function and trace how UNIX socket options are handled. Confirm how the second callback argument controls socket permissions, then define an exposed way for callers to set them and verify that the resulting UNIX socket uses the requested permissions.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- backend
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100