Bug 41416

Summary:	reimplement hasher-priv using a client/server model
Product:	Sisyphus	Reporter:	Dmitry V. Levin <ldv>
Component:	hasher-priv	Assignee:	Arseny Maslennikov <arseny>
Status:	CLOSED FIXED	QA Contact:	qa-sisyphus
Severity:	enhancement
Priority:	P5	CC:	aen, glebfm, ldv, rider
Version:	unstable
Hardware:	all
OS:	Linux
URL:	https://lore.altlinux.org/devel/20210824082436.1555890-1-arseny@altlinux.org/
Bug Depends on:
Bug Blocks:	41370

Description

Dmitry V. Levin 2021-11-23 14:59:10 MSK

Let's rewrite hasher-priv into a privileged daemon operating in response to requests from unprivileged client processes.

This would allow us, among other benefits, to get rid of set-uid root executable thus making the tool suitable for no_new_privs environments, and, consequently, to use hasher inside hasher chroot.

Comment 1

AEN 2021-11-23 15:19:06 MSK

Повышаю до Normal ввиду важности темы.

Comment 2

Dmitry V. Levin 2021-11-23 15:26:18 MSK

(In reply to AEN from comment #1)
> Повышаю до Normal ввиду важности темы.

С формальной точки зрения это не ошибка, а новая фича, поэтому пусть всё-таки будет enhancement, эта категория не влияет на приоритеты.

Comment 3

Dmitry V. Levin 2023-12-05 23:46:38 MSK

Implemented in hasher-priv 2.0 more than a year ago.