Branch: refs/heads/main
Home: https://github.com/gssapi/gssproxy
Commit: c92e174017a2c2fe7cdeb3f42bf547bd0b5f1b56
https://github.com/gssapi/gssproxy/commit/c92e174017a2c2fe7cdeb3f42bf547bd0…
Author: Simo Sorce <simo(a)redhat.com>
Date: 2026-07-08 (Wed, 08 Jul 2026)
Changed paths:
M docs/README.md
M src/client/gpm_common.c
M src/client/gssapi_gpm.h
M src/mechglue/gss_plugin.c
Log Message:
-----------
Support clients running in AT_SECURE context
When a client application runs in a secure execution context (e.g., setuid,
where getauxval(AT_SECURE) is non-zero), environment variables like
GSSPROXY_SOCKET are ignored to prevent security issues.
This change allows these clients to work by automatically constructing a
program-specific socket name (e.g., <default_socket>.<program_name>) when
AT_SECURE is detected. The mechanism interposer now checks if this socket is
accessible to decide whether to enable gssproxy. Documentation is updated to
guide users on configuring the service for this specific socket.
Assisted-by: Gemini <gemini(a)google.com>
Signed-off-by: Simo Sorce <simo(a)redhat.com>
To unsubscribe from these emails, change your notification settings at https://github.com/gssapi/gssproxy/settings/notifications
