[Opendnssec-user] Changing permissions and ownership of Unix sockets?

[Stephane Bortzmeyer]

On Tue, Oct 08, 2019 at 01:33:25PM +0200,
 Stephane Bortzmeyer <bortzmeyer at nic.fr> wrote 
 a message of 12 lines which said:

> I can use chgrp and chmod but I wonder how to do it properly. I do not
> find a parameter in the configuration files to specifify another group
> / other permissions.

In the mean time, I did it by editing systemd service files. For the signer:

[Service]
...
# Give the daemon some time to create the socket
ExecStartPost=sleep 5
ExecStartPost=chgrp nagios /run/opendnssec/engine.sock
ExecStartPost=chmod g+w /run/opendnssec/engine.sock

(Same thing for the enforcer, with its own socket.)