quixos-toolchain/quixos-nix-helpers
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Budget OpenSSH temporary sockets in the shared address policy (#503)

Browse Source
This commit is contained in:
Quixos Development Agent 01f26965-84fa-4a79-8069-725682c13065
2026-10-29 12:30:56 +00:00
parent df9f50ea31
commit 3bb4324aa0
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
socket-address.mjs
+2 -1
View File
@@ -64,7 +64,8 @@ export function socketDirectory(identity, options) {
const { uid, root } = settings(options); const { uid, root } = settings(options);
const input = canonical(["quixos-unix-socket-v1", uid, identity]); const input = canonical(["quixos-unix-socket-v1", uid, identity]);
if (Buffer.byteLength(input) > 1024 * 1024) throw Error("Socket identity exceeds its bound"); if (Buffer.byteLength(input) > 1024 * 1024) throw Error("Socket identity exceeds its bound");
return path.join(root, createHash("sha256").update(input).digest("hex")); // Preserve all 256 bits while leaving room for protocol-added socket suffixes.
return path.join(root, createHash("sha256").update(input).digest("base64url"));
} }
export function socketAddress(identity, role, options) { export function socketAddress(identity, role, options) {