uwsgi.ini enables the stats server using /run/uwsgi/stats.sock. It doesn't however specify anything related to the socket permissions which means it gets created with modes rwxr-xr-x, owner uwsgi:uwsgi. rw-rw---- would make more sense to me, so that unneeded executable bits would be dropped, world readability would be dropped, and users in group uwsgi could connect. That'd be accomplished with this patch: diff --git a/emperor.ini b/emperor.ini index e0ba2d1..6b974b9 100644 --- a/emperor.ini +++ b/emperor.ini @@ -6,2 +6,3 @@ emperor = /etc/uwsgi.d stats = /run/uwsgi/stats.sock +chmod-socket = 660 emperor-tyrant = true
This bug appears to have been reported against 'rawhide' during the Fedora 25 development cycle. Changing version to '25'.
uwsgi-2.0.14-1.fc25 has been pushed to the Fedora 25 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2016-18518b6b30
uwsgi-2.0.14-1.fc25 has been pushed to the Fedora 25 stable repository. If problems still persist, please make note of it in this bug report.