Johnathan Corgan db5b6b10bd config: unify default control-socket path resolution ...

Daemon and client tools previously evaluated the same three locations
(`/run/fips`, `XDG_RUNTIME_DIR`, `/tmp`) in different orders, allowing
fipsctl/fipstop to connect to a socket the daemon never bound when
neither side set `node.control.socket_path` explicitly.

Collapse the three call sites (`default_control_path`,
`default_gateway_path`, `ControlConfig::default_socket_path`) into a
shared `resolve_default_socket` helper. Canonical order is
`/run/fips` -> `$XDG_RUNTIME_DIR/fips/` -> `/tmp/fips-<name>`. Two
hardening fixes folded in: writability is probed via tempfile create
rather than mode bits (ACL- and group-aware), and `XDG_RUNTIME_DIR`
is validated as an existing directory before being used (avoids
stale post-logout values).

The deployed fleet is unaffected -- packaged configs set
`node.control.socket_path` explicitly. The fix surfaces for dev
runs and the binary-install getting-started path.

2026-05-08 13:37:16 +00:00

..

control.rs

config: unify default control-socket path resolution

2026-05-08 13:37:16 +00:00

dns.rs

Apply rustfmt to master-only code

2026-04-10 08:47:02 +00:00

mod.rs

Implement outbound LAN gateway

2026-04-09 16:53:32 +00:00

nat.rs

Implement inbound mesh port forwarding

2026-04-15 05:04:37 +00:00

net.rs

Apply rustfmt to master-only code

2026-04-10 08:47:02 +00:00

pool.rs

Apply rustfmt to master-only code

2026-04-10 08:47:02 +00:00