From 088968d8b2df59e604466ecbb1902cf3d84558d6 Mon Sep 17 00:00:00 2001 From: J Wyman Date: Wed, 7 Oct 2026 12:10:56 -0400 Subject: [PATCH] fix: Apply restrictive permissions to shared memory Signed-off-by: J Wyman --- src/shm_manager.cc | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/src/shm_manager.cc b/src/shm_manager.cc index a595f0c6..8b10a171 100644 --- a/src/shm_manager.cc +++ b/src/shm_manager.cc @@ -134,8 +134,12 @@ SharedMemoryManager::SharedMemoryManager( if (create) { // Remove (if any) and create the region. bi::shared_memory_object::remove(shm_region_name.c_str()); + // Create permissions for the shm region: read/write user + read-only + // group. + bi::permissions perms{S_IRUSR | S_IWUSR | S_IRGRP}; + // Create the shm region object with the specified permissions. shm_obj_ = std::make_unique( - bi::create_only, shm_region_name.c_str(), bi::read_write); + bi::create_only, shm_region_name.c_str(), bi::read_write, perms); shm_obj_->truncate(shm_size); } else { // Open the existing region.