Miroslav Lichvar 51da7a0694 cmdmon: refactor command authorization checks ...

Try to simplify the code and make it more robust to potential bugs.

Instead of maintaing a table mapping all commands to open/auth
permissions, use a short list of open commands. Split the processing
of the commands into two groups, read-write commands and read-only
(monitoring) commands, where the first group is processed only with full
access. Check both the socket descriptor and address type before giving
full access. While moving the code, reorder the commands alphabetically.

2025-02-12 15:10:56 +01:00

20 KiB

Raw Blame History

View Raw