From d00674221f4efb2be15edda8d82816f9404b7a26 Mon Sep 17 00:00:00 2001
From: Orazio <22700499+orazioedoardo@users.noreply.github.com>
Date: Sun, 2 Jan 2022 10:13:41 +0100
Subject: [PATCH] Restrict socket access to root and users in the signal-cli
 group

---
 data/signal-cli-socket.socket | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/data/signal-cli-socket.socket b/data/signal-cli-socket.socket
index e8583562..0207b059 100644
--- a/data/signal-cli-socket.socket
+++ b/data/signal-cli-socket.socket
@@ -3,6 +3,11 @@ Description=Send secure messages to Signal clients
 
 [Socket]
 ListenStream=%t/signal-cli/socket
+SocketUser=root
+# Add yourself to the signal-cli group to talk with the service
+# Run 'usermod -aG signal-cli yourusername'
+SocketGroup=signal-cli
+SocketMode=0660
 
 [Install]
 WantedBy=sockets.target