Add permissions to the sockets acquired from systemd during the socket activation...

diff --git a/src/rrd_daemon.c b/src/rrd_daemon.c
index 755a340e1addb2596a6f1f44927aa15cee0c7f77..c71ae9a6ff7d2c23c78c9717eac8700ddab3c9a9 100644 (file)
--- a/src/rrd_daemon.c
+++ b/src/rrd_daemon.c
@@ -3453,6 +3453,12 @@ static int open_listen_sockets_systemd(void) /* {{{ */
 
     listen_fds[listen_fds_num].fd = sd_fd;
     listen_fds[listen_fds_num].family = sa.sun_family;
+    /* Add permissions to the socket */
+    if (default_socket.permissions != 0)
+      socket_permission_copy(&listen_fds[listen_fds_num], &default_socket);
+    else
+      /* Add permission for ALL commands to the socket. */
+      socket_permission_set_all(&listen_fds[listen_fds_num]);
     listen_fds_num++;
   }