Set permissions on pcsc socket dir to owner only

There is no reason for any user other than the current one to be able to communicate with the remote smartcard.
2022-12-09 11:55:31 +00:00
parent e05d223462
commit 89c873e4aa
1 changed files with 3 additions and 1 deletions
@@ -1874,7 +1874,9 @@ scard_pcsc_init(void)
                }
            }
        }
-        g_chmod_hex(g_pcsclite_ipc_dir, 0x1777);
+        /* Only the current user should be able to access the remote
+         * smartcard */
+        g_chmod_hex(g_pcsclite_ipc_dir, 0x700);
        g_snprintf(g_pcsclite_ipc_file, 255, "%s/pcscd.comm", g_pcsclite_ipc_dir);
        g_lis->trans_conn_in = my_pcsc_trans_conn_in;
        error = trans_listen(g_lis, g_pcsclite_ipc_file);