Drop permissions on Unix admin socket

2023-02-07 10:10:05 +01:00 · 2023-02-07 10:10:05 +01:00 · bf931709db
parent 67ccc19fdd
commit bf931709db
1 changed files with 4 additions and 0 deletions
--- a/cmd/soju/main.go
+++ b/cmd/soju/main.go
@ -220,6 +220,10 @@ func main() {
 				log.Fatalf("failed to start listener on %q: %v", listen, err)
 			}
 			ln = proxyProtoListener(ln, srv)
+			// TODO: this is racy
+			if err := os.Chmod(path, 0600); err != nil {
+				log.Fatalf("failed to chmod Unix admin socket: %v", err)
+			}
 			go func() {
 				if err := srv.Serve(ln, srv.HandleAdmin); err != nil {
 					log.Printf("serving %q: %v", listen, err)