resolved: paranoia: restrict socket mode as much as we can

This commit is contained in:
Lennart Poettering
2022-09-29 00:42:14 +01:00
committed by Luca Boccassi
parent 5ad1513845
commit 1aefb25f37
+1 -1
View File
@@ -582,7 +582,7 @@ static int varlink_notification_server_init(Manager *m) {
if (r < 0)
return log_error_errno(r, "Failed to register varlink disconnect handler: %m");
r = varlink_server_listen_address(server, "/run/systemd/resolve/io.systemd.Resolve.Monitor", 0660);
r = varlink_server_listen_address(server, "/run/systemd/resolve/io.systemd.Resolve.Monitor", 0600);
if (r < 0)
return log_error_errno(r, "Failed to bind to varlink socket: %m");