From 6f363153d7789a45efc413dd28109c88f9ac62ef Mon Sep 17 00:00:00 2001
From: Julian Kornberger <jk+github@digineo.de>
Date: Thu, 22 Mar 2018 14:14:44 +0100
Subject: [PATCH] Adjust permissions of unix socket

fixes #8358
---
 pkg/api/http_server.go | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/pkg/api/http_server.go b/pkg/api/http_server.go
index 921a641b5da..387a543ca89 100644
--- a/pkg/api/http_server.go
+++ b/pkg/api/http_server.go
@@ -74,12 +74,15 @@ func (hs *HTTPServer) Start(ctx context.Context) error {
 			return nil
 		}
 	case setting.SOCKET:
-		ln, err := net.Listen("unix", setting.SocketPath)
+		ln, err := net.ListenUnix("unix", &net.UnixAddr{Name: setting.SocketPath, Net: "unix"})
 		if err != nil {
 			hs.log.Debug("server was shutdown gracefully")
 			return nil
 		}
 
+		// Make socket writable by group
+		os.Chmod(setting.SocketPath, 0660)
+
 		err = hs.httpSrv.Serve(ln)
 		if err != nil {
 			hs.log.Debug("server was shutdown gracefully")