From 3897e578c3a43689bd23703c9ee0c5ca9dd44a3b Mon Sep 17 00:00:00 2001
From: J Logan <john_logan@apple.com>
Date: Sat, 25 Oct 2025 22:19:06 -0700
Subject: [PATCH] Use exact permissions for socket mount into guest. (#362)

- Closes #361.
---
 vminitd/Sources/vminitd/VsockProxy.swift | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/vminitd/Sources/vminitd/VsockProxy.swift b/vminitd/Sources/vminitd/VsockProxy.swift
index a2fb92b5..5c0bcf6a 100644
--- a/vminitd/Sources/vminitd/VsockProxy.swift
+++ b/vminitd/Sources/vminitd/VsockProxy.swift
@@ -113,6 +113,8 @@ extension VsockProxy {
             perms: self.udsPerms,
             unlinkExisting: true
         )
+        let oldMask = umask(0)
+        defer { umask(oldMask) }
         let uds = try Socket(type: type)
         try uds.listen()
         listener = uds