Skip to content
Snippets Groups Projects

use unix socket for bitmask-helper local api

Merged use unix socket for bitmask-helper local api
unix-socket into main
Merged jkito requested to merge unix-socket into main
  1. Oct 19, 2024
    • jkito's avatar
      helper: use unix socket for local api · d98efd23
      jkito authored 
      bitmask-vpn installs a daemon called bitmask-helper
which exposes a http api to handle firewall up/down
and openvpn connect/disconnect (only in macos)

this daemon was listening on localhost, since it is
meant to be only accessible to local processes we'v
changed it to listen on a unix domain socket

using unix socket allows to apply file  permissions
and restrict access to the api to only the intended
user
      d98efd23