Index | Thread | Search

From:
Claudio Jeker <claudio@openbsd.org>
Subject:
Re: bgplgd, fix restricted socket path
To:
Denis Fondras <denis@openbsd.org>
Cc:
tech@openbsd.org
Date:
Tue, 17 Sep 2024 20:59:58 +0200

Download raw body.

Thread
On Tue, Sep 17, 2024 at 08:48:36PM +0200, Denis Fondras wrote:
> bgplg(8) and bgplgsh(8) are advising "/var/www/run/bgpd.rsock".
> I think bgplgd(8) should use it as well.
> 
> OK ?
> 
> Index: bgplgd.8
> ===================================================================
> RCS file: /cvs/src/usr.sbin/bgplgd/bgplgd.8,v
> diff -u -p -r1.9 bgplgd.8
> --- bgplgd.8	15 Aug 2024 09:13:13 -0000	1.9
> +++ bgplgd.8	17 Sep 2024 18:42:06 -0000
> @@ -69,7 +69,7 @@ to query
>  Use
>  .Ar socket
>  instead of the default
> -.Pa /var/run/bgpd.rsock
> +.Pa /var/www/run/bgpd.rsock
>  to communicate with
>  .Xr bgpd 8 .
>  .It Fl s Ar socket
> Index: slowcgi.c
> ===================================================================
> RCS file: /cvs/src/usr.sbin/bgplgd/slowcgi.c,v
> diff -u -p -r1.7 slowcgi.c
> --- slowcgi.c	26 Jan 2024 18:11:49 -0000	1.7
> +++ slowcgi.c	17 Sep 2024 18:42:06 -0000
> @@ -229,7 +229,7 @@ int			debug = 0;
>  int			on = 1;
>  char			*fcgi_socket = "/var/www/run/bgplgd.sock";
>  char			*bgpctlpath = "bgpctl";
> -char			*bgpctlsock = "/var/run/bgpd.rsock";
> +char			*bgpctlsock = "/var/www/run/bgpd.rsock";
>  
>  
>  /*

Unsure. bgplgd does not run in /var/www so there is no need for the socket
to be there. Now if you want to run all the bgplg together then you may want
that but why?

-- 
:wq Claudio