Restrict socket permissions

nginx · Sep 7, 2022 · 6bf52cb · 6bf52cb · oliveromahony · Sep 7, 2022
1 parent a89971a
commit 6bf52cb
Show file tree

Hide file tree

Showing 4 changed files with 8 additions and 14 deletions.
diff --git a/src/extensions/advanced-metrics/reader/reader.go b/src/extensions/advanced-metrics/reader/reader.go
@@ -67,12 +67,9 @@ func NewReader(address string) *Reader {
 func newReader(address string, listenerConfig ListenerConfig, frameChannel chan Frame, newWorker NewWorkerConstructor) *Reader {
 	return &Reader{
 		listenerConfig: listenerConfig,
-
-		address: address,
-
-		newWorker: newWorker,
-
-		frameChannel: frameChannel,
+		address:        address,
+		newWorker:      newWorker,
+		frameChannel:   frameChannel,
 	}
 }
 

diff --git a/src/plugins/advanced_metrics.go b/src/plugins/advanced_metrics.go
@@ -214,7 +214,7 @@ func enableWritePermissionForSocket(path string) error {
 		case <-timeout:
 			return lastError
 		default:
-			lastError = os.Chmod(path, 0774)
+			lastError = os.Chmod(path, 0660)
 			if lastError == nil {
 				return nil
 			}

diff --git a/...ormance/vendor/github.com/nginx/agent/v2/src/extensions/advanced-metrics/reader/reader.go b/...ormance/vendor/github.com/nginx/agent/v2/src/extensions/advanced-metrics/reader/reader.go
diff --git a/test/performance/vendor/github.com/nginx/agent/v2/src/plugins/advanced_metrics.go b/test/performance/vendor/github.com/nginx/agent/v2/src/plugins/advanced_metrics.go