meta-app-framework/recipes-security/security-manager/security-manager/0015-Restrict-socket-accesses.patch

   1 From 7cffcd61378a9d7c0e7db5691b2da3a37448c969 Mon Sep 17 00:00:00 2001
   2 From: =?UTF-8?q?Jos=C3=A9=20Bollo?= <jose.bollo@iot.bzh>
   3 Date: Thu, 30 Jan 2020 09:19:25 +0100
   4 Subject: [PATCH 15/15] Restrict socket accesses
   5 MIME-Version: 1.0
   6 Content-Type: text/plain; charset=UTF-8
   7 Content-Transfer-Encoding: 8bit
   8
   9 Ensure that only members of the group and the owner can access
  10 the security manager.
  11
  12 Bug-AGL: SPEC-3146
  13
  14 Change-Id: I68ce6523db4bfd4707c3680555c3cb0cf8858ef2
  15 Signed-off-by: José Bollo <jose.bollo@iot.bzh>
  16 ---
  17  systemd/security-manager.socket | 2 +-
  18  1 file changed, 1 insertion(+), 1 deletion(-)
  19
  20 diff --git a/systemd/security-manager.socket b/systemd/security-manager.socket
  21 index af1c1da..b401f77 100644
  22 --- a/systemd/security-manager.socket
  23 +++ b/systemd/security-manager.socket
  24 @@ -1,6 +1,6 @@
  25  [Socket]
  26  ListenStream=/run/security-manager.socket
  27 -SocketMode=0777
  28 +SocketMode=0660
  29  SmackLabelIPIn=*
  30  SmackLabelIPOut=@
  31
  32 --
  33 2.21.1
  34