With CGO disabled, it only reads /etc/passwd, while the glibc getpwnam(3) can qu... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

dchest 64 days ago | parent | context | favorite | on: TS-2026-009: Insecure argument handling in Tailsca...

With CGO disabled, it only reads /etc/passwd, while the glibc getpwnam(3) can query LDAP etc.

catlifeonmars 63 days ago [–]

That’s not the use case of the tailscale daemon though, which was using getent passwd.

To clarify: I’m not against CGO, just introducing a glibc dependency by default. I would only introduce it when I needed it.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact