From 4b642834e01b0cf512c23666a1f959810d5cbe6e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Anton=20Luka=20=C5=A0ijanec?= <anton@sijanec.eu>
Date: Thu, 6 Jun 2024 20:24:08 +0200
Subject: cleanly exit closing socket

---
 README.adoc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'README.adoc')

diff --git a/README.adoc b/README.adoc
index d5ba33d..efd59d3 100644
--- a/README.adoc
+++ b/README.adoc
@@ -63,7 +63,7 @@ Example Configuration:
 `listen` ::
 Listen IP address and port like `0.0.0.0:0000`
 
-You may optionally listen on a UNIX socket by setting the JSON configuration key "network" to "unix" and "listen" to "/path/to/your.sock". You may actually listen on any network that is supported by https://pkg.go.dev/net#Listen
+You may optionally listen on a UNIX socket by setting the JSON configuration key "network" to "unix" and "listen" to "/path/to/your.sock". You may actually listen on any network that is supported by https://pkg.go.dev/net#Listen -- When you're listening on a UNIX socket, you can use the setgid bit of the directory that will contain your socket file. This way, the socket file will preserve the group ownership of the directory. You can also set the umask to decide who can connect to your socket and who can't. Just make sure that you create the logfile beforehand so that the logfile has different (perhaps more strict) permissions.
 
 `pamservicename` ::
 PAM authentication requires service-name like `login`, `su`. You can choose existing service or create a new. Existing service can be seen typing `ls /etc/pam.d/`
-- 
cgit v1.2.3

