summaryrefslogtreecommitdiffstats
path: root/meta-security/recipes-security/cynara/cynara/0004-Fix-mode-of-sockets.patch
blob: f19cdfb50236d51ef1cb84eaa2a12249b2683ad1 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
From 233fb8a93343c3c9c04914e1148ef5ab87a808a1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jos=C3=A9=20Bollo?= <jose.bollo@iot.bzh>
Date: Thu, 25 Jan 2018 12:52:39 +0100
Subject: [PATCH] Fix mode of sockets
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Setting execution bit on the socket serves nothing.

Change-Id: I2ca1ea8e0c369ee5517878e92073ace0e50f9f10
Signed-off-by: José Bollo <jose.bollo@iot.bzh>

---
 systemd/cynara-admin.socket | 2 +-
 systemd/cynara.socket       | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/systemd/cynara-admin.socket b/systemd/cynara-admin.socket
index 2d1aea4..ed38386 100644
--- a/systemd/cynara-admin.socket
+++ b/systemd/cynara-admin.socket
@@ -1,6 +1,6 @@
 [Socket]
 ListenStream=/run/cynara/cynara-admin.socket
-SocketMode=0700
+SocketMode=0600
 SmackLabelIPIn=@
 SmackLabelIPOut=@
 
diff --git a/systemd/cynara.socket b/systemd/cynara.socket
index 9f2a870..fad2745 100644
--- a/systemd/cynara.socket
+++ b/systemd/cynara.socket
@@ -1,6 +1,6 @@
 [Socket]
 ListenStream=/run/cynara/cynara.socket
-SocketMode=0777
+SocketMode=0666
 SmackLabelIPIn=*
 SmackLabelIPOut=@