Merge pull request #385 from nisbet-hubbard/patch-2

Fix unix socket permissions
matrix-org · Jan 8, 2024 · 49c9226 · 49c9226
2 parents e6a2e67 + cef9361
commit 49c9226
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/v3.go b/v3.go
@@ -248,8 +248,9 @@ func unixSocketListener(bindAddr string) net.Listener {
 	if err != nil {
 		logger.Fatal().Err(err).Msg("failed to serve unix socket")
 	}
-	// TODO: safe default for now (rwxr-xr-x), could be extracted as env variable if needed
-	err = os.Chmod(bindAddr, 0755)
+	// least permissions and work out of box (-w--w--w-); could be extracted as
+	// env variable if needed
+	err = os.Chmod(bindAddr, 0222)
 	if err != nil {
 		logger.Fatal().Err(err).Msg("failed to set unix socket permissions")
 	}