diff --git a/sesman/chansrv/smartcard_pcsc.c b/sesman/chansrv/smartcard_pcsc.c index b529da2e..edfcea87 100644 --- a/sesman/chansrv/smartcard_pcsc.c +++ b/sesman/chansrv/smartcard_pcsc.c @@ -1874,7 +1874,9 @@ scard_pcsc_init(void) } } } - g_chmod_hex(g_pcsclite_ipc_dir, 0x1777); + /* Only the current user should be able to access the remote + * smartcard */ + g_chmod_hex(g_pcsclite_ipc_dir, 0x700); g_snprintf(g_pcsclite_ipc_file, 255, "%s/pcscd.comm", g_pcsclite_ipc_dir); g_lis->trans_conn_in = my_pcsc_trans_conn_in; error = trans_listen(g_lis, g_pcsclite_ipc_file);