use 0600 as default proxy socket endpoint file mode

amanda-wee · amanda-wee · commit 4e99b700b34a · 2025-09-30T22:37:35.000+13:00
diff --git a/internal/config/config.go b/internal/config/config.go
@@ -27,7 +27,7 @@ var (
 	defaultWatchdogInterval            = uint(0)                // watchdog interval in seconds (0 to disable)
 	defaultStopOnWatchdog              = false                  // set to true to stop the program when the socket gets unavailable (otherwise log only)
 	defaultProxySocketEndpoint         = ""                     // empty string means no socket listener, but regular TCP listener
-	defaultProxySocketEndpointFileMode = uint(0o400)            // set the file mode of the unix socket endpoint
+	defaultProxySocketEndpointFileMode = uint(0o600)            // set the file mode of the unix socket endpoint
 	defaultAllowBindMountFrom          = ""                     // empty string means no bind mount restrictions
 )
 

Original file line number	Diff line number	Diff line change
`@@ -27,7 +27,7 @@ var (`
`27`	`27`	`defaultWatchdogInterval = uint(0) // watchdog interval in seconds (0 to disable)`
`28`	`28`	`defaultStopOnWatchdog = false // set to true to stop the program when the socket gets unavailable (otherwise log only)`
`29`	`29`	`defaultProxySocketEndpoint = "" // empty string means no socket listener, but regular TCP listener`
`30`		`- defaultProxySocketEndpointFileMode = uint(0o400) // set the file mode of the unix socket endpoint`
	`30`	`+ defaultProxySocketEndpointFileMode = uint(0o600) // set the file mode of the unix socket endpoint`
`31`	`31`	`defaultAllowBindMountFrom = "" // empty string means no bind mount restrictions`
`32`	`32`	`)`
`33`	`33`