Merge branch 'fchmod_fix' of git://github.com/1848/MPD

This commit is contained in:
Max Kellermann 2018-08-14 23:14:10 +02:00
commit 4ba3812baf
3 changed files with 13 additions and 3 deletions

View File

@ -184,6 +184,13 @@ OneServerSocket::Open()
SOCK_STREAM, 0, SOCK_STREAM, 0,
address, 5); address, 5);
#ifdef HAVE_UN
/* allow everybody to connect */
if (!path.IsNull())
chmod(path.c_str(), 0666);
#endif
/* register in the EventLoop */ /* register in the EventLoop */
SetFD(_fd.Release()); SetFD(_fd.Release());

View File

@ -34,11 +34,10 @@ socket_bind_listen(int domain, int type, int protocol,
if (!fd.CreateNonBlock(domain, type, protocol)) if (!fd.CreateNonBlock(domain, type, protocol))
throw MakeSocketError("Failed to create socket"); throw MakeSocketError("Failed to create socket");
#ifdef HAVE_UN #ifdef HAVE_UN
if (domain == AF_UNIX) { if (domain == AF_UNIX) {
/* allow everybody to connect */ /* Prevent access until right permissions are set */
fchmod(fd.Get(), 0666); fchmod(fd.Get(), 0);
} }
#endif #endif

View File

@ -32,6 +32,10 @@ class SocketAddress;
/** /**
* Creates a socket listening on the specified address. This is a * Creates a socket listening on the specified address. This is a
* shortcut for socket(), bind() and listen(). * shortcut for socket(), bind() and listen().
* When a unix socket is created (domain == AF_UNIX), its
* permissions will be stripped down to prevent unauthorized
* access. The caller is responsible to apply proper permissions
* at a later point.
* *
* Throws #std::system_error on error. * Throws #std::system_error on error.
* *