fix(core): set correct permissions for socket path when umask is set …

…to `0027` (#14084) When umask is configured to `0027`, the newly created `kong_config.socket_path` directory inherits permissions `750`, which restricts access for worker processes. This commit ensures that the `socket_path` directory is explicitly set to permissions `755` using `chmod 755`, thereby preventing permission-related errors and allowing proper access for all necessary processes. Fix: [FTI-6298](https://konghq.atlassian.net/browse/FTI-6298) Signed-off-by: tzssangglass <[email protected]>
Kong · Jan 9, 2025 · f4d9c7f · f4d9c7f · github-actions · Jan 9, 2025
1 parent b7f5ed2
commit f4d9c7f
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/changelog/unreleased/kong/fix-socket-path-permissions.yml b/changelog/unreleased/kong/fix-socket-path-permissions.yml
@@ -0,0 +1,3 @@
+message: "Fixed an issue where `socket_path` permissions were not correctly set to `755` when the umask setting did not give enough permission"
+type: bugfix
+scope: Core
diff --git a/kong/cmd/utils/prefix_handler.lua b/kong/cmd/utils/prefix_handler.lua
@@ -509,6 +509,12 @@ local function prepare_prefix(kong_config, nginx_custom_template_path, skip_writ
     if not ok then
       return nil, err
     end
+
+    local ok, _, _, stderr = pl_utils.executeex("chmod 755 " .. kong_config.socket_path)
+    if not ok then
+      return nil, "can not set correct permissions for socket path: " .. kong_config.socket_path
+                  .. " (" .. stderr .. ")"
+    end
   end
 
   -- create directories in prefix