SERVER-13022 added option to set permissions on UNIX domain socket file

Signed-off-by: Benety Goh <benety@mongodb.com>

1 files changed, 10 insertions, 0 deletions

diff --git a/src/mongo/db/server_options_helpers.cpp b/src/mongo/db/server_options_helpers.cpp
index d8bd1f55633..67bff90a0bc 100644
--- a/src/mongo/db/server_options_helpers.cpp
+++ b/src/mongo/db/server_options_helpers.cpp
@@ -104,10 +104,13 @@ namespace {
     Status addGeneralServerOptions(moe::OptionSection* options) {
         StringBuilder portInfoBuilder;
         StringBuilder maxConnInfoBuilder;
+        StringBuilder unixSockPermsBuilder;
 
         portInfoBuilder << "specify port number - " << ServerGlobalParams::DefaultDBPort << " by default";
         maxConnInfoBuilder << "max number of simultaneous connections - "
                            << DEFAULT_MAX_CONN << " by default";
+        unixSockPermsBuilder << "permissions to set on UNIX domain socket file - " 
+                             << DEFAULT_UNIX_PERMS << " by default";
 
         options->addOptionChaining("help", "help,h", moe::Switch, "show this usage information")
                                   .setSources(moe::SourceAllLegacy);
@@ -240,6 +243,9 @@ namespace {
         options->addOptionChaining("net.unixDomainSocket.pathPrefix", "unixSocketPrefix",
                 moe::String, "alternative directory for UNIX domain sockets (defaults to /tmp)");
 
+        options->addOptionChaining("net.unixDomainSocket.filePermissions", "filePermissions", 
+                moe::Int, unixSockPermsBuilder.str().c_str() );
+
         options->addOptionChaining("processManagement.fork", "fork", moe::Switch,
                 "fork server process");
 
@@ -712,6 +718,10 @@ namespace {
         if (params.count("net.unixDomainSocket.enabled")) {
             serverGlobalParams.noUnixSocket = !params["net.unixDomainSocket.enabled"].as<bool>();
         }
+        if (params.count("net.unixDomainSocket.filePermissions")) {
+            serverGlobalParams.unixSocketPermissions = 
+                params["net.unixDomainSocket.filePermissions"].as<int>();
+        }
 
         if ((params.count("processManagement.fork") &&
              params["processManagement.fork"].as<bool>() == true) &&