meta-security/recipes-security/cynara/cynara/0004-Fix-mode-of-sockets.patch

   1 From 233fb8a93343c3c9c04914e1148ef5ab87a808a1 Mon Sep 17 00:00:00 2001
   2 From: =?UTF-8?q?Jos=C3=A9=20Bollo?= <jose.bollo@iot.bzh>
   3 Date: Thu, 25 Jan 2018 12:52:39 +0100
   4 Subject: [PATCH] Fix mode of sockets
   5 MIME-Version: 1.0
   6 Content-Type: text/plain; charset=UTF-8
   7 Content-Transfer-Encoding: 8bit
   8
   9 Setting execution bit on the socket serves nothing.
  10
  11 Change-Id: I2ca1ea8e0c369ee5517878e92073ace0e50f9f10
  12 Signed-off-by: José Bollo <jose.bollo@iot.bzh>
  13
  14 ---
  15  systemd/cynara-admin.socket | 2 +-
  16  systemd/cynara.socket       | 2 +-
  17  2 files changed, 2 insertions(+), 2 deletions(-)
  18
  19 diff --git a/systemd/cynara-admin.socket b/systemd/cynara-admin.socket
  20 index 2d1aea4..ed38386 100644
  21 --- a/systemd/cynara-admin.socket
  22 +++ b/systemd/cynara-admin.socket
  23 @@ -1,6 +1,6 @@
  24  [Socket]
  25  ListenStream=/run/cynara/cynara-admin.socket
  26 -SocketMode=0700
  27 +SocketMode=0600
  28  SmackLabelIPIn=@
  29  SmackLabelIPOut=@
  30
  31 diff --git a/systemd/cynara.socket b/systemd/cynara.socket
  32 index 9f2a870..fad2745 100644
  33 --- a/systemd/cynara.socket
  34 +++ b/systemd/cynara.socket
  35 @@ -1,6 +1,6 @@
  36  [Socket]
  37  ListenStream=/run/cynara/cynara.socket
  38 -SocketMode=0777
  39 +SocketMode=0666
  40  SmackLabelIPIn=*
  41  SmackLabelIPOut=@
  42