Base: Make anon's helper services run with 600 socket permissions

Some of these were using 660 permissions which meant that other users
in the "users" group could connect to anon's service processes.

Let's tighten things up by not allowing that. :^)
This commit is contained in:
Andreas Kling 2021-06-06 18:03:57 +02:00
parent 4c47b3951d
commit b968d44375
Notes: sideshowbarker 2024-07-19 01:59:31 +09:00

View file

@ -1,6 +1,6 @@
[RequestServer]
Socket=/tmp/portal/request
SocketPermissions=660
SocketPermissions=600
Lazy=1
Priority=low
User=anon
@ -10,7 +10,7 @@ AcceptSocketConnections=1
[WebContent]
Socket=/tmp/portal/webcontent
SocketPermissions=660
SocketPermissions=600
Lazy=1
User=anon
BootModes=graphical
@ -19,7 +19,7 @@ AcceptSocketConnections=1
[ImageDecoder]
Socket=/tmp/portal/image
SocketPermissions=660
SocketPermissions=600
Lazy=1
User=anon
BootModes=graphical
@ -28,7 +28,7 @@ AcceptSocketConnections=1
[WebSocket]
Socket=/tmp/portal/websocket
SocketPermissions=660
SocketPermissions=600
Lazy=1
Priority=low
User=anon
@ -80,7 +80,7 @@ User=anon
[Clipboard]
Socket=/tmp/portal/clipboard
SocketPermissions=660
SocketPermissions=600
Priority=low
User=anon
@ -143,7 +143,7 @@ BootModes=text
[CppLanguageServer]
Socket=/tmp/portal/language/cpp
SocketPermissions=660
SocketPermissions=600
Lazy=1
User=anon
MultiInstance=1
@ -151,7 +151,7 @@ AcceptSocketConnections=1
[ShellLanguageServer]
Socket=/tmp/portal/language/shell
SocketPermissions=660
SocketPermissions=600
Lazy=1
User=anon
MultiInstance=1