mirrors/versitygw
1
0
Fork 0
mirror of https://github.com/versity/versitygw.git synced 2026-08-21 06:36:23 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat: add --socket-perm option for UNIX socket file permissions

Browse Source 
Add a --socket-perm flag (VGW_SOCKET_PERM env var) to control the
file-mode permissions on file-backed UNIX domain sockets. This allows
operators to limit access permission without relying on process umask.
The option applies to S3, admin, and WebUI sockets and has no effect
on TCP/IP addresses or Linux abstract namespace sockets.

Fixes #2010
This commit is contained in:
Ben McClelland
2026-04-20 19:07:08 -07:00
parent 7b65d744e6
commit 0dc074acbf
7 changed files with 97 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
extra/example.conf
+8
View File
@@ -102,6 +102,14 @@ ROOT_SECRET_ACCESS_KEY=
#VGW_ADMIN_CERT=
#VGW_ADMIN_CERT_KEY=
# The VGW_SOCKET_PERM option sets the file-mode permissions for file-backed
# UNIX domain sockets created by the S3, admin, and WebUI servers. The value
# must be an octal integer (e.g. 0660 to allow owner and group read/write
# access). This option has no effect on TCP/IP addresses or Linux abstract
# namespace sockets (those prefixed with "@"). When not set, the socket file
# permissions are determined by the process umask.
#VGW_SOCKET_PERM=
# The VGW_QUIET option when set will supress the S3 server request summary
# logging to stdout.
#VGW_QUIET=false