yggdrasil-go/contrib
TomZ aa46ee57bb [Security] do not run as root.
An Internet accessible service should aim to have as little as
possible attack surface, which is much easier to do when running
with the absolute minimum number of priviledges.

This makes the systemd setup run the service as a user 'yggdrasil'
and uses the systemd feature `RuntimeDirectory` to auto-create
the /var/run/yggdrasil dir so our non-elevated client can still
create the socket.

The sysusers file will cause the user be created on first install
using the sysusers subsystem.
2022-01-09 14:50:19 +01:00
..
ansible update ironwood dependency, fix ansible code, go mod tidy 2021-05-23 17:52:10 -05:00
apparmor apparmor: allow yggdrasil to resolve hostnames (#739) 2020-12-06 20:52:10 +00:00
busybox-init contrib/busybox-init: add reload and use -useconffile 2019-03-06 11:30:49 +01:00
deb Update generate.sh (#736) 2020-12-06 20:52:54 +00:00
docker Update Dockerfile 2021-03-24 15:39:55 +02:00
freebsd Add freebsd service script into contrib 2018-10-06 00:24:07 +01:00
logo Update neilalexander's logo proposal 2018-11-14 19:25:35 +00:00
macos Set hostArchitectures in macOS .pkg installer 2021-12-06 11:19:58 +00:00
msi Fix wintun hopefully 2021-06-13 11:13:02 +01:00
openrc contrib/openrc: I like symmetry 2019-03-05 22:27:51 +01:00
semver remove bashisms for semver 2021-06-06 02:33:11 -05:00
systemd [Security] do not run as root. 2022-01-09 14:50:19 +01:00
yggdrasil-brute-simple remove ygg-brute gitignore 2019-05-18 04:25:57 -07:00