commit 9cec8ee5a8ed696f3c4ee9021a5109a5c53d3d68
author Davide Pesavento <davide.pesavento@lip6.fr> Wed Feb 19 11:21:59 2014 +0100
committer Alex Afanasyev <afanasev@cs.ucla.edu> Wed Feb 19 15:04:45 2014 -0800
tree 849309fd9056a03e0fba2c0efad8a33965002e04
parent 93ce75e6f764545d4ee0f7086016b3338eae0011

face: Create the socket file in UnixStreamChannel world-writable.

Fixes a permission denied error when nfd is run as root and a non-root
application tries to communicate with it over a Unix face.

refs: #1272
Change-Id: I4ba60f9a9dfbec12d787424dff98f38b76b48cf0

daemon/face/unix-stream-channel.cpp

diff --git a/daemon/face/unix-stream-channel.cpp b/daemon/face/unix-stream-channel.cpp
index 428d33e..ebc7e77 100644
--- a/daemon/face/unix-stream-channel.cpp
+++ b/daemon/face/unix-stream-channel.cpp
@@ -7,6 +7,7 @@
 #include "unix-stream-channel.hpp"
 
 #include <boost/filesystem.hpp>
+#include <sys/stat.h> // for chmod()
 
 namespace nfd {
 
@@ -54,6 +55,11 @@
   m_acceptor->bind(m_endpoint);
   m_acceptor->listen(backlog);
 
+  if (::chmod(m_endpoint.path().c_str(), 0666) < 0)
+    {
+      throw Error("Failed to chmod() socket file at " + m_endpoint.path());
+    }
+
   shared_ptr<stream_protocol::socket> clientSocket =
     make_shared<stream_protocol::socket>(boost::ref(m_ioService));
   m_acceptor->async_accept(*clientSocket,