clawdie/colibri
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 44

fix(daemon): make the Herdr socket group-writable (0770) (Sam & Claude) #25

Merged
clawdie merged 1 commit from fix-colibri-socket-perms into main 2026-06-05 10:56:24 +02:00
Conversation 0 Commits 1 Files changed 1 +20
clawdie commented 2026-06-05 10:56:09 +02:00
Owner
Copy link

Re-landed on current main (the earlier branch never merged — main moved under
it). Operators hit "permission denied" connecting to the colibri daemon from
colibri-tui / the clawdie helper: socket.rs binds the Unix socket but never
sets its mode, so it stays at the umask default (0755 = owner-only write).
Connecting needs WRITE perm, so a colibri-group member (clawdie) gets EACCES.
chmod the socket to 0770 after bind. Shared socket::serve, so it covers both
colibri-daemon and the clawdie agent.

Co-Authored-By: Claude Opus 4.8 noreply@anthropic.com

Re-landed on current main (the earlier branch never merged — main moved under it). Operators hit "permission denied" connecting to the colibri daemon from colibri-tui / the `clawdie` helper: socket.rs binds the Unix socket but never sets its mode, so it stays at the umask default (0755 = owner-only write). Connecting needs WRITE perm, so a colibri-group member (clawdie) gets EACCES. chmod the socket to 0770 after bind. Shared socket::serve, so it covers both colibri-daemon and the clawdie agent. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
clawdie added 1 commit 2026-06-05 10:56:11 +02:00 
Re-landed on current main (the earlier branch never merged — main moved under
it). Operators hit "permission denied" connecting to the colibri daemon from
colibri-tui / the `clawdie` helper: socket.rs binds the Unix socket but never
sets its mode, so it stays at the umask default (0755 = owner-only write).
Connecting needs WRITE perm, so a colibri-group member (clawdie) gets EACCES.
chmod the socket to 0770 after bind. Shared socket::serve, so it covers both
colibri-daemon and the clawdie agent.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
clawdie merged commit b5a781f6e4 into main 2026-06-05 10:56:24 +02:00
clawdie deleted branch fix-colibri-socket-perms 2026-06-05 10:56:24 +02:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
first-proof blocker

gates the first proven end-to-end

  
hardening

security/robustness follow-up, not a first-proof gate

No labels
first-proof blocker
hardening
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: clawdie/colibri#25
No description provided.
Delete branch "fix-colibri-socket-perms"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?