@ccdm94 Re the 777 permissions on the UNIX socket created in server.py - I guess it would make sense to allow the UNIX socket permissions to be hardened to be more limited. Seems like a desirable feature but I don't think this code path is used in the scope of this MIR (cherrypy3).
I did a read through the cherrypy3 usage of cheroot and AFAICT all of its usage of cheroot is via the network socket support rather than the UNIX socket support (socket_host/port configuration options). ** Changed in: python-cheroot (Ubuntu) Status: Incomplete => New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1930111 Title: [MIR] new dependencies of cherrypy3: jaraco.collections, jaraco.classes, jaraco.text, python-cheroot, python-jaraco.functools, python-tempora, python-portend, zc.lockfile To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/cherrypy3/+bug/1930111/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs