Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Umask for creating socket should be available as cmd param #1366

Closed
analogic opened this issue Apr 12, 2018 · 3 comments · Fixed by #3437
Closed

Umask for creating socket should be available as cmd param #1366

analogic opened this issue Apr 12, 2018 · 3 comments · Fixed by #3437
Labels

Comments

@analogic
Copy link
Contributor

Right now there is no way to set up rights on rpc socket, everytime lightningd is restarted new rpc socket is created with rw only for running user and thus making very hard to communicate between different users reliably.

@Sjors
Copy link
Contributor

Sjors commented May 31, 2018

Just ran into that as well. Although there's currently no way to constrain RPC permissions. I'd like to be able to install RPC consumers as a separate users. This would be especially useful if there's a way to constrain RPC permissions (perhaps per socket?). E.g. a limited ability to create and check the status of invoices.

@ZmnSCPxj
Copy link
Contributor

ZmnSCPxj commented Jun 1, 2018

@Sjors, it seems you are proposing that we impose some kind of capabilities system to particular RPC sockets? I think that would be useful, but is complex enough to deserve a separate issue/feature request here.

@Sjors
Copy link
Contributor

Sjors commented Jun 1, 2018

@ZmnSCPxj done in #1535

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging a pull request may close this issue.

4 participants