mc/mc-proxy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Set gRPC socket to 0660 for group access

Browse Source 
The MCP agent needs to access the mc-proxy admin socket. The agent
runs as the mcp user in the mc-proxy group. 0600 blocked group
access; 0660 allows it.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Kyle Isom
2026-04-02 12:28:19 -07:00
parent 82fce4129d
commit 2c42287a3c
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
internal/grpcserver/grpcserver.go
View File

@@ -60,7 +60,7 @@ func New(cfg config.GRPC, srv *server.Server, store *db.Store, logger *slog.Logg
return nil, nil, fmt.Errorf("listening on unix socket %s: %w", path, err) return nil, nil, fmt.Errorf("listening on unix socket %s: %w", path, err)
} }
if err := os.Chmod(path, 0600); err != nil { if err := os.Chmod(path, 0660); err != nil {
_ = ln.Close() _ = ln.Close()
return nil, nil, fmt.Errorf("setting socket permissions: %w", err) return nil, nil, fmt.Errorf("setting socket permissions: %w", err)
} }