[SERVER-13893] Unix domain socket support should be both AF_UNIX and AF_LOCAL Created: 09/May/14  Updated: 22/Dec/14  Resolved: 21/May/14

Status: Closed
Project: Core Server
Component/s: Security
Affects Version/s: 2.7.0
Fix Version/s: None

Type: Improvement Priority: Major - P3
Reporter: David Hows Assignee: David Hows
Resolution: Duplicate Votes: 0
Labels: mac, network, security
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Duplicate
duplicates SERVER-8492 Initial admin user can't be added ove... Closed
Related
Backwards Compatibility: Fully Compatible
Participants:

 Description   

Currently the localhost exception does not apply to the Unix domain socket (tested on OSX) as incoming requests show as AF_LOCAL.

According to man unix 7, AF_LOCAL and AF_UNIX are mutually compatible.

http://man7.org/linux/man-pages/man7/unix.7.html



 Comments   
Comment by Githook User [ 29/May/14 ]

Author:

{u'username': u'daveh86', u'name': u'daveh86', u'email': u'howsdav@gmail.com'}

Message: SERVER-8492 SERVER-13893 Test for detecting named/unnamed unix socket

Signed-off-by: Benety Goh <benety@mongodb.com>
Branch: master
https://github.com/mongodb/mongo/commit/507a7d5e34d051ba3f30c3add50afa08b790f6d3

Comment by David Hows [ 28/May/14 ]

https://github.com/mongodb/mongo/pull/682

Comment by David Hows [ 12/May/14 ]

This is limited to OSX only. I tested on Linux and we allow access via the domain socket under localHostException.

Comment by Andreas Nilsson [ 12/May/14 ]

It is supposed to work so it's a bug if it doesn't. david.hows can you provide details on how it fails?

Generated at Thu Feb 08 03:33:14 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.