Re: Re: improving security of AF_UNIX sockets

Peter Eisentraut <peter_e@gmx.net> writes:
> If there's no 'w' then connect() will fail with ECONNREFUSED on Linux 2.2.
> [ and several other systems document EACCES as the error code ]

FWIW: HPUX 10.20 doesn't document this error condition at all on the
connect(2) man page, but some quick experimentation shows that indeed
write access to the socket is necessary and sufficient to make a
connection.  (And EACCES is what you get if you ain't got it.)

            regards, tom lane