monitor: lib: Support Unix domain socket (UDS) and TCP/IP socket concurrently 03/280803/3
authorSung-hun Kim <sfoon.kim@samsung.com>
Fri, 2 Sep 2022 05:41:47 +0000 (14:41 +0900)
committerSung-hun Kim <sfoon.kim@samsung.com>
Mon, 5 Sep 2022 11:45:07 +0000 (20:45 +0900)
commit1bbc88af8380214499fdeac39f34ff1f8c0322b1
tree3bc834c9e520ac740152d0645e4c3d8943521951
parenta8b342aa318d95d043cdff721e80033b82d0b201
monitor: lib: Support Unix domain socket (UDS) and TCP/IP socket concurrently

Previous TCP/IP socket-based IPC has a security issue that
anyone can access the opened port without credential. Since
UDS is exported as a file, we can apply file-based access
control to it. So, we use UDS instead of TCP/IP socket by
default.

At the same time, we also support TCP/IP socket for
resource-monitor-tool which is a web-based monitoring tool
in user space. In the future, we will support TCP/IP socket
only in debugging mode which is turned on/off by root-
privileged command line tool.

Change-Id: Id46a5e7560cf95d09f31222e5022ce3ea209753a
Signed-off-by: Sung-hun Kim <sfoon.kim@samsung.com>
CMakeLists.txt
lib/resource-monitor/resource-monitor.c
packaging/pass.spec
src/monitor/request-handler.c
systemd/pass-resource-monitor.socket.in [new file with mode: 0644]