abrown38andClaude Opus 5.5 cf49df0346 Add a local unix socket for root on the server ...

jarld also listens on /run/jarl/jarl.sock (socket in jarl.yaml). Requests
on it from root or jarld's own user need no token and act as an
administrator; the kernel's SO_PEERCRED says who is connecting, and
anyone else must send a token. The jarl CLI uses the socket when no server
is configured, or with -s local, so 'sudo jarl status' works on the server
with nothing set up and a lost token or password never locks root out.
Changes are audited under the system user's name via "socket".

The systemd unit creates /run/jarl (0750). Socket paths over 107 bytes
are refused with a clear message. The docs explain the socket and what
happens when a token is revoked.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-08 15:10:57 +00:00

..

acme.md

Add an httpreq endpoint for lego and Traefik

2026-10-08 13:48:47 +00:00

api.md

Add a local unix socket for root on the server

2026-10-08 15:10:57 +00:00

cli.md

Add a local unix socket for root on the server

2026-10-08 15:10:57 +00:00

concepts.md

Fix the dashboard's pending-changes count; explain zones in the docs

2026-10-08 11:52:10 +00:00

configuration.md

Add a local unix socket for root on the server

2026-10-08 15:10:57 +00:00

development.md

Add a Debian package and bash completion

2026-10-08 15:10:57 +00:00

install.md

Add a local unix socket for root on the server

2026-10-08 15:10:57 +00:00

operations.md

Multi-server CLI, more reverse zones, and a fix for new view directories

2026-10-08 08:12:03 +00:00

permissions.md

Add a local unix socket for root on the server

2026-10-08 15:10:57 +00:00

stats.md

Add optional query statistics

2026-10-07 20:21:34 +00:00

validation.md

Fix zone list filtering and BIND warning display; add a views guide

2026-10-07 15:36:24 +00:00

views.md

Fix zone list filtering and BIND warning display; add a views guide

2026-10-07 15:36:24 +00:00