wweir 3286851fdf fix(install,config): lock down installed config, atomic binary copy, reject socks5 password, parse bare ipv6 ...

- The installer writes /etc/sower/sowerd.toml with 0600 instead of 0644:
  the file holds the plaintext client-auth password.
- Binary updates are atomic (temp file + rename) so an interrupted update
  cannot leave a truncated sowerd at /usr/local/bin.
- ExecStart quotes both paths for systemd parsing.
- remote.password for a socks5 upstream is rejected at validation instead
  of being silently ignored (the transport only negotiates no-auth).
- splitRemoteAddr accepts bare IPv6 literals (default port) and rejects
  malformed multi-colon addresses like '::::' instead of passing them
  through as hosts.

2026-08-12 17:23:14 +08:00

..

service_test.go

fix(install,config): lock down installed config, atomic binary copy, reject socks5 password, parse bare ipv6

2026-08-12 17:23:14 +08:00

service.go

fix(install,config): lock down installed config, atomic binary copy, reject socks5 password, parse bare ipv6

2026-08-12 17:23:14 +08:00