diff options
| author | Andreas Kling <kling@serenityos.org> | 2021-05-06 12:54:01 +0200 |
|---|---|---|
| committer | Andreas Kling <kling@serenityos.org> | 2021-05-06 13:33:08 +0200 |
| commit | a7e44d8b3c9e1b960b3f5dfecbd308d5da8906f9 (patch) | |
| tree | 02087ad06e032a6e33ee7199f718b3f200fbc530 /Base/etc/SystemServer.ini | |
| parent | 434c190667a05ac048c3bb7fc3a8aa07e7830d9c (diff) | |
| download | serenity-a7e44d8b3c9e1b960b3f5dfecbd308d5da8906f9.zip | |
Base: Remove unnecessary UID separation of multi-process Browser
After looking closely at this, I realized that we've been running
all the service processes under separate user accounts even though
there's actually no need to.
Since we already use pledge() and unveil() to limit the scope and
access of these programs, separating them to another UID doesn't
achieve anything meaningful. So let's bring them back to the "anon"
user account and simplify things.
Programs affected:
- ImageDecoder
- RequestServer
- WebContent
- WebSocket
Longer term, I'd like for all of these to get spawned for the current
desktop user somehow, possibly by some kind of session manager, or
perhaps by the Browser program itself. But for now they remain under
SystemServer's control.
Diffstat (limited to 'Base/etc/SystemServer.ini')
| -rw-r--r-- | Base/etc/SystemServer.ini | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/Base/etc/SystemServer.ini b/Base/etc/SystemServer.ini index 6e7d25dd4c..c1e8d11794 100644 --- a/Base/etc/SystemServer.ini +++ b/Base/etc/SystemServer.ini @@ -3,7 +3,7 @@ Socket=/tmp/portal/request SocketPermissions=660 Lazy=1 Priority=low -User=request +User=anon BootModes=text,graphical,self-test MultiInstance=1 AcceptSocketConnections=1 @@ -12,7 +12,7 @@ AcceptSocketConnections=1 Socket=/tmp/portal/webcontent SocketPermissions=660 Lazy=1 -User=webcontent +User=anon BootModes=graphical MultiInstance=1 AcceptSocketConnections=1 @@ -21,7 +21,7 @@ AcceptSocketConnections=1 Socket=/tmp/portal/image SocketPermissions=660 Lazy=1 -User=image +User=anon BootModes=graphical MultiInstance=1 AcceptSocketConnections=1 @@ -37,7 +37,7 @@ Socket=/tmp/portal/websocket SocketPermissions=660 Lazy=1 Priority=low -User=websocket +User=anon BootModes=text,graphical,self-test MultiInstance=1 AcceptSocketConnections=1 |