Either disable or fix dynamic completion in SUID/SGID mode #137

Closed
opened 2025-12-03 05:58:49 +01:00 by oysteikt · 8 comments
Owner
No description provided.
oysteikt added the bug label 2025-12-03 05:58:49 +01:00
oysteikt added this to the Initial release milestone 2025-12-03 06:21:56 +01:00
Author
Owner

Maybe this isn't as bad as I thought actually, the implementation uses the "bootstrap-and-drop-privs" implementation

Maybe this isn't as bad as I thought actually, the implementation uses the "bootstrap-and-drop-privs" implementation
Author
Owner

Should test before closing the issue

Should test before closing the issue
Author
Owner

Nope, does not work, don't particularly care to find out why considering #101

Nope, does not work, don't particularly care to find out why considering #101
oysteikt reopened this issue 2025-12-04 03:42:38 +01:00
Author
Owner

Let's add cfg conditionals around the dynamic completers and immediately drop privs in the completion block?

Let's add cfg conditionals around the dynamic completers and immediately drop privs in the completion block?
oysteikt reopened this issue 2025-12-04 03:43:58 +01:00
Author
Owner

I need to stop clicking the wrong button

I need to stop clicking the wrong button
Author
Owner

Maybe it has to do with the nixos wrapper thing I'm using to test it? Maybe normal SUID/SGID would work?

Maybe it has to do with the nixos wrapper thing I'm using to test it? Maybe normal SUID/SGID would work?
Author
Owner

Normal completions does not seem to work either

Normal completions does not seem to work either
Author
Owner

I was missing the completions because the package was not added to the system packages, just exposed the binary through the binary wrapper.

When turning off the "is the binary SUID/SGID" check, normal completion works well. Dynamic completions do not work too well, because of some tokio trickery. But they have been disabled for suid/sgid in an earlier commit, so all is fine.

I was missing the completions because the package was not added to the system packages, just exposed the binary through the binary wrapper. When turning off the "is the binary SUID/SGID" check, normal completion works well. Dynamic completions do not work too well, because of some tokio trickery. But they have been disabled for suid/sgid in an earlier commit, so all is fine.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Projects/muscl#137