Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Make VPN client runnable without root #534

Merged
merged 3 commits into from
Sep 30, 2020
Merged

Make VPN client runnable without root #534

merged 3 commits into from
Sep 30, 2020

Conversation

Darkren
Copy link
Contributor

@Darkren Darkren commented Sep 25, 2020

Did you run make format && make check?
Yes
Fixes #382

Changes:

  • VPN client now is runnable by non-root users. But, the binary has to be owned by root and have permissions like 4755, so any user could run it
  • Linux capabilities are used for Linux version.

How to test this PR:
Mac OS:

  1. make bin
  2. make host-apps
  3. sudo chown root ./apps/vpn-client
  4. sudo chmod 4755 ./apps/vpn-client
  5. ./skywire-visor ./skywire-config.json

Linux:

  1. make bin
  2. make host-apps
  3. sudo setcap 'cap_net_admin+p' ./apps/vpn-client
  4. ./skywire-visor ./skywire-config.json

@Darkren Darkren requested a review from nkryuchkov September 25, 2020 15:12
internal/vpn/os_linux.go Outdated Show resolved Hide resolved
internal/vpn/os_linux.go Outdated Show resolved Hide resolved
@jdknives jdknives merged commit 2af0ffa into skycoin:feature/v0.4.0 Sep 30, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants