From 2c42287a3c0b92fb544409620117d4f768278d27 Mon Sep 17 00:00:00 2001 From: Kyle Isom Date: Thu, 2 Apr 2026 12:28:19 -0700 Subject: [PATCH] Set gRPC socket to 0660 for group access The MCP agent needs to access the mc-proxy admin socket. The agent runs as the mcp user in the mc-proxy group. 0600 blocked group access; 0660 allows it. Co-Authored-By: Claude Opus 4.6 (1M context) --- internal/grpcserver/grpcserver.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/internal/grpcserver/grpcserver.go b/internal/grpcserver/grpcserver.go index 905b952..c8d9542 100644 --- a/internal/grpcserver/grpcserver.go +++ b/internal/grpcserver/grpcserver.go @@ -60,7 +60,7 @@ func New(cfg config.GRPC, srv *server.Server, store *db.Store, logger *slog.Logg return nil, nil, fmt.Errorf("listening on unix socket %s: %w", path, err) } - if err := os.Chmod(path, 0600); err != nil { + if err := os.Chmod(path, 0660); err != nil { _ = ln.Close() return nil, nil, fmt.Errorf("setting socket permissions: %w", err) }