From: Denis Bychkov <manover@gmail.com>
Date: Fri, 3 Jul 2015 07:32:09 +0000 (-0400)
Subject: Add permissions to the sockets acquired from systemd during the socket activation... 
X-Git-Tag: v1.5.4~26^2^2
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=refs%2Fpull%2F628%2Fhead;p=thirdparty%2Frrdtool-1.x.git

Add permissions to the sockets acquired from systemd during the socket activation process
---

diff --git a/src/rrd_daemon.c b/src/rrd_daemon.c
index 755a340e..c71ae9a6 100644
--- a/src/rrd_daemon.c
+++ b/src/rrd_daemon.c
@@ -3453,6 +3453,12 @@ static int open_listen_sockets_systemd(void) /* {{{ */
 
     listen_fds[listen_fds_num].fd = sd_fd;
     listen_fds[listen_fds_num].family = sa.sun_family;
+    /* Add permissions to the socket */
+    if (default_socket.permissions != 0)
+      socket_permission_copy(&listen_fds[listen_fds_num], &default_socket);
+    else
+      /* Add permission for ALL commands to the socket. */
+      socket_permission_set_all(&listen_fds[listen_fds_num]);
     listen_fds_num++;
   }