meta-security/recipes-security/cynara/cynara/0004-Fix-mode-of-sockets.patch

   1 From 2bd62bca98a8a8cf194fb2b68aed68d982f58520 Mon Sep 17 00:00:00 2001
   2 From: =?UTF-8?q?Jos=C3=A9=20Bollo?= <jose.bollo@iot.bzh>
   3 Date: Thu, 25 Jan 2018 12:52:39 +0100
   4 Subject: [PATCH 4/6] Fix mode of sockets
   5 MIME-Version: 1.0
   6 Content-Type: text/plain; charset=UTF-8
   7 Content-Transfer-Encoding: 8bit
   8
   9 Setting execution bit on the socket serves nothing.
  10
  11 Change-Id: I2ca1ea8e0c369ee5517878e92073ace0e50f9f10
  12 Signed-off-by: José Bollo <jose.bollo@iot.bzh>
  13 ---
  14  systemd/cynara-admin.socket | 2 +-
  15  systemd/cynara.socket       | 2 +-
  16  2 files changed, 2 insertions(+), 2 deletions(-)
  17
  18 diff --git a/systemd/cynara-admin.socket b/systemd/cynara-admin.socket
  19 index 2d1aea4..ed38386 100644
  20 --- a/systemd/cynara-admin.socket
  21 +++ b/systemd/cynara-admin.socket
  22 @@ -1,6 +1,6 @@
  23  [Socket]
  24  ListenStream=/run/cynara/cynara-admin.socket
  25 -SocketMode=0700
  26 +SocketMode=0600
  27  SmackLabelIPIn=@
  28  SmackLabelIPOut=@
  29
  30 diff --git a/systemd/cynara.socket b/systemd/cynara.socket
  31 index 9f2a870..fad2745 100644
  32 --- a/systemd/cynara.socket
  33 +++ b/systemd/cynara.socket
  34 @@ -1,6 +1,6 @@
  35  [Socket]
  36  ListenStream=/run/cynara/cynara.socket
  37 -SocketMode=0777
  38 +SocketMode=0666
  39  SmackLabelIPIn=*
  40  SmackLabelIPOut=@
  41
  42 --
  43 2.14.3
  44