Commit Briefs


83577462cc Stefan Sperling

switch gotd.conf syntax from 'unix_socket' to 'listen on'

ok op@


6f854dde05 Stefan Sperling

remove the gotsh group requirement from gotd; any user can now connect

Repository access is now controlled by access rules in gotd.conf, and concurrent connections to the gotd socket by local users are limited by the listen process. We should keep refining our anti-DoS measures in the future, but at least we have something in place now. ok jamsek, op


b50a2b4639 Stefan Sperling

fork gotd repo_read/repo_write children on demand

ok op, jamsek


a5feed5fb6 Stefan Sperling

add more gotd regression tests for bad requests; patch by Mikhail

And rename req_wrong_commit.sh to request_bad.sh to reflect the broader scope of this test script.



6eb6bfed34 Stefan Sperling

tweak naming in new gotd regress test for consistency


44ff0a4492 Stefan Sperling

add a gotd regression test which requests a non-existent commit

Patch by Mikhail


b1a9f90ef8 Stefan Sperling

in gotd regress, use USER instead of USERNAME and check for sudo/doas users

Problem where USERNAME is not usually set on OpenBSD reported by Mikhail ok jamsek


62192466ab Stefan Sperling

make it easier to run gotd regress via doas(1); ok kn, tracey


d5a5db9a70 Stefan Sperling

add a gotd auth test case for an explicitly denied group

ok op@


ec093ca728 Stefan Sperling

add a gotd auth test case for explicitly denied users

ok op@


55f70a402c Stefan Sperling

add a test case for requests from users not listed in gotd.conf

ok op@


ddbe612c69 Stefan Sperling

fix group membership check in gotd auth

ok op@


0ccf3acb6c Stefan Sperling

implement per-repository read/write authorization rules in gotd

ok op@


4ce98cf7ad Stefan Sperling

add a regression test for sending to an empty repository via gotd

ok op@


4398c738bc Omar Polo

awk ftw! no need to grep, awk can filter lines by itself

ok stsp@