about summary refs log tree commit diff
diff options
context:
space:
mode:
authorsternenseemann <git@lukasepple.de>2019-12-10 15:36:43 +0100
committersternenseemann <git@lukasepple.de>2019-12-10 15:36:43 +0100
commit60c857019c2c4709c09147de6a9156a861d9e722 (patch)
treed6e072262cf59188d1d74ef88a6adc14add2a636
parent63a7e84d7a9b30f0ed8a799f3a071c5fda40e8cb (diff)
release a couple of fixes as 0.2.1.1 0.2.1.1
-rw-r--r--CHANGELOG.md16
-rw-r--r--spacecookie.cabal2
2 files changed, 17 insertions, 1 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md
index c68e939..14e2159 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,21 @@
 # Revision history for spacecookie
 
+## 0.2.1.1 Fixed Privilege Dropping
+
+* Server
+  * Make `user` parameter in config optional. If it is not given or set to `null`, `spacecookie` won't attempt
+    to change its UID and GID. This is especially useful, if socket activation is used. In that case it is not
+    necessary to start spacecookie as `root` since systemd sets up the socket, so `spacecookie` can be already
+    started by the right user and doesn't need to change UID.
+  * Example Systemd config files
+    * `SocketMode` is now `660` instead of default `666`.
+    * Set `User` and `Group` for `spacecookie.service` as well.
+    * Set `"user": null` in `spacecookie.json`
+* Library
+  * Fixed issue that led to `runGopher*` trying to change UID even if it wasn't possible (not running as root).
+    This especially affected the `spacecookie` server, since `cRunUserName` would always be `Just`.
+  * Made logging related to `dropPrivileges` clearer.
+
 ## 0.2.1.0 Systemd Support
 
 * Improved systemd support.
diff --git a/spacecookie.cabal b/spacecookie.cabal
index 6532aa0..73367ff 100644
--- a/spacecookie.cabal
+++ b/spacecookie.cabal
@@ -1,6 +1,6 @@
 cabal-version:       >= 2.0
 name:                spacecookie
-version:             0.2.1.0
+version:             0.2.1.1
 synopsis:            Gopher Library and Server Daemon
 description:         Simple gopher library that allows writing custom gopher
                      applications. Also includes a fully-featured gopher server