LibCore: Stop making the RPC sockets go=rw

Now that we can fchmod() on a pre-bind() socket, use that to lock down
the RPC sockets we publish in all CEventLoop-driven programs.
This commit is contained in:
Andreas Kling 2020-01-03 20:21:39 +01:00
commit e76e533a69
Notes: sideshowbarker 2024-07-19 10:23:39 +09:00

View file

@ -84,6 +84,12 @@ bool CLocalServer::listen(const String& address)
#endif
ASSERT(m_fd >= 0);
rc = fchmod(m_fd, 0600);
if (rc < 0) {
perror("fchmod");
ASSERT_NOT_REACHED();
}
auto socket_address = CSocketAddress::local(address);
auto un = socket_address.to_sockaddr_un();
rc = ::bind(m_fd, (const sockaddr*)&un, sizeof(un));