One of the reasons I’ve been looking at Mach again is that I think a big thing missing from most modern UNIX-like platforms (that aren’t Darwin-based, anyway) is good kernel-level IPC with support for service activation. Lots of systems will just use UNIX domain sockets or something like the abominable DBus on top of them without even really thinking about service activation. So I’m looking at what it might take to implement a Mach-like kernel IPC interface, sans Mach…

#mach #ipc #unix

🔐 Been looking into hardening Unix Domain Sockets on Linux lately – here are some takeaways.

🛡️ Filesystem permissions: don’t rely on chmod on the socket file alone – some systems silently ignore it (hello SELinux). Protect the directory it lives in with 0750 and watch out for umask when calling bind() – it silently masks your intended permissions. Set umask before bind(), not chmod after.

🔍 Peer authentication: SO_PEERCRED after accept() gives you the PID, UID and GID of the connecting process, verified by the kernel. But it only captures credentials at connect() time – if the peer changes identity later, you won’t see it.

📨 Per-message auth: SCM_CREDENTIALS via sendmsg/recvmsg solves that. The kernel verifies the credentials on every message, even if the sender tries to lie. Essential when processes switch identity during their lifetime.

⚡ SOCK_SEQPACKET instead of SOCK_STREAM is worth considering. You get atomic message boundaries from the kernel – no custom framing, no partial reads, no glued-together messages.

🚦 Rate limiting unfortunately has to happen in userspace – the kernel offers nothing useful for per-peer UDS rate limiting. A simple token bucket per connection does the job.

Anyone else spent time hardening UDS? Curious what else people do beyond the basics.

#Linux #UnixDomainSockets #Security #SystemsProgramming #IPC #Infosec

Как работает RPC. Пишем свое RPC-приложение

В данной статье мы подробно поговорим об устройстве RPC. Также для лучшего понимания применим знания на практике и напишем свое RPC-приложение под Windows. Изучить матчасть

https://habr.com/ru/articles/1010204/

#rpc #cybersecurity #network #безопасность #сетевая_безопасность #network_security #ipc #межпроцессное_взаимодействие

█ Preus estables al febrer sense l'impacte de la guerra a l'Orient Mitjà: què puja i què baixa ▓▒░ L'IPC es manté estable al febrer i se situa al 2% a Catalunya i al 2,3% al conjunt de l'Estat, a l'espera de l'impacte que tindrà l'encariment dels carburants al març
https://www.3cat.cat/3catinfo/preus-estables-al-febrer-sense-limpacte-de-la-guerra-a-lorient-mitja-que-puja-i-que-baixa/noticia/3399423/?ext=MASTODON_SOCIAL

#ipc #economia #3catinfo