Bind the daemon unix sockets at their final mode so no chmod follows the bind

This commit is contained in:
Viktor Liu
2026-09-16 11:20:11 +02:00
parent aeafa12b4c
commit b0e96188b6
4 changed files with 70 additions and 46 deletions
+1 -1
View File
@@ -62,7 +62,7 @@ func applySocketAccess(path string, principals []string) error {
// listenUnixPrivate binds a Unix socket. Windows has no umask and no mode on
// these sockets, so binding is all there is to do; a configured restriction is
// refused by applySocketAccess before the daemon serves.
func listenUnixPrivate(address string) (net.Listener, error) {
func listenUnixPrivate(address string, _ []string) (net.Listener, error) {
return net.Listen("unix", address)
}