From f4616fc36649ec351f9d4221f224e1732a333718 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Marek=20Marczykowski-G=C3=B3recki?=
 <marmarek@invisiblethingslab.com>
Date: Mon, 27 Feb 2017 21:42:06 +0100
Subject: [PATCH] qubesd: make qubesd socket qubes-group owned

QubesOS/qubes-issues#853
---
 qubes/tools/qubesd.py | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/qubes/tools/qubesd.py b/qubes/tools/qubesd.py
index 4217a3af..916a1c72 100644
--- a/qubes/tools/qubesd.py
+++ b/qubes/tools/qubesd.py
@@ -4,6 +4,7 @@ import asyncio
 import functools
 import io
 import os
+import shutil
 import signal
 import struct
 import traceback
@@ -156,6 +157,7 @@ def main(args=None):
     old_umask = os.umask(0o007)
     server = loop.run_until_complete(loop.create_unix_server(
         functools.partial(QubesDaemonProtocol, app=args.app), QUBESD_SOCK))
+    shutil.chown(QUBESD_SOCK, group='qubes')
     os.umask(old_umask)
     del old_umask