From ee5416dad791a72e86b499cb6ef13ef9d7a9a381 Mon Sep 17 00:00:00 2001
From: Tomasz Kramkowski <tomasz@kramkow.ski>
Date: Sat, 16 Aug 2025 19:02:55 +0100
Subject: Create API socket with more sensible permissions

---
 klippy/webhooks.py | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'klippy/webhooks.py')

diff --git a/klippy/webhooks.py b/klippy/webhooks.py
index 5902c4ef..661e9117 100644
--- a/klippy/webhooks.py
+++ b/klippy/webhooks.py
@@ -8,6 +8,7 @@ import errno
 import logging
 import os
 import socket
+import stat
 import sys
 
 import gcode
@@ -126,6 +127,10 @@ class ServerSocket:
         self.sock = socket.socket(socket.AF_UNIX, socket.SOCK_STREAM)
         self.sock.setblocking(0)
         self.sock.bind(server_address)
+        # TODO: This is a good compromise for now, but it should be configurable
+        os.chmod(
+            server_address, stat.S_IRUSR | stat.S_IWUSR | stat.S_IRGRP | stat.S_IWGRP
+        )
         self.sock.listen(1)
         self.fd_handle = self.reactor.register_fd(
             self.sock.fileno(), self._handle_accept
-- 
cgit v1.2.3-70-g09d2