"GOT", but the "O" is a cute, smiling pufferfish. Index | Thread | Search

From:
Omar Polo <op@omarpolo.com>
Subject:
Re: gotd: remove gotsh group requirement
To:
Stefan Sperling <stsp@stsp.name>
Cc:
gameoftrees@openbsd.org
Date:
Wed, 04 Jan 2023 12:10:29 +0100

Download raw body.

Thread
On 2023/01/03 23:12:03 +0100, Stefan Sperling <stsp@stsp.name> wrote:
> We now require per-repository user/group access rules in gotd.conf(5),
> and enforce a per-user limit of concurrent connections to gotd(8).
> Local users should no longer be able to access repositories they should
> not have access to, or heavily DoS gotd over the unix socket.
> 
> So it should be reasonably safe to open the gotd socket up to anyone.
> The goal is to make server setup and maintenance easier.
> 
> Ok? Did I miss removing or adjusting anything?

it should fix all the places where the group was mentioned.  ok op@