saltstack/salt
1
0
Fork 0
mirror of https://github.com/saltstack/salt.git synced 2025-04-17 10:10:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

restrict perms on master communication sockets

Browse source
This commit is contained in:
Thomas S Hatch 2012-06-03 16:55:55 -06:00
parent 02a1c677ec
commit 8654f429c9
1 changed files with 17 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
salt/master.py
View file

@ -229,6 +229,17 @@ class EventPublisher(multiprocessing.Process):
log.info('Starting the Salt Event Publisher on {0}'.format(epub_uri))
epub_sock.bind(epub_uri)
epull_sock.bind(epull_uri)
# Restrict access to the sockets
os.chmod(
os.path.join(self.opts['sock_dir'],
'master_event_pub.ipc'),
448
)
os.chmod(
os.path.join(self.opts['sock_dir'],
'master_event_pull.ipc'),
448
)
try:
while True:
@ -274,6 +285,12 @@ class Publisher(multiprocessing.Process):
log.info('Starting the Salt Publisher on {0}'.format(pub_uri))
pub_sock.bind(pub_uri)
pull_sock.bind(pull_uri)
# Restrict access to the socket
os.chmod(
os.path.join(self.opts['sock_dir'],
'publish_pull.ipc'),
448
)
try:
while True: