search

lkrg-org / lkrg

Linux Kernel Runtime Guard
https://lkrg.org
Other
410 stars 72 forks source link

Logger: Re-enable daemonization, add privilege dropping #321

Closed solardiz closed 7 months ago

solardiz commented 7 months ago

Nov 24, 2022

Right now, the daemonization code is if-ed out and the service is assumed to be started by a user and listen on an unprivileged port and uses relative paths to logs. This is convenient for testing, but before release we need to make this into a proper daemon that starts as root, listens on a possibly privileged port, daemonizes itself, and drops privileges. It will also need to use an absolute path to the logs directory, expecting to be installed on a system globally.

solardiz commented 7 months ago

This is now implemented in its basic form. Future work may include making this configurable and dropping more privileges (not just switching to a non-root user).