nodejs
diff --git a/Collapse file
‎src/pipe_wrap.cc‎
Copy file name to clipboardExpand all lines: src/pipe_wrap.cc
+3Lines changed: 3 additions & 0 deletions b/Collapse file
‎src/pipe_wrap.cc‎
Copy file name to clipboardExpand all lines: src/pipe_wrap.cc
+3Lines changed: 3 additions & 0 deletions
diff --git a/Collapse file
‎test/parallel/test-permission-net-uds.js‎
Copy file name to clipboard
+31Lines changed: 31 additions & 0 deletions b/Collapse file
‎test/parallel/test-permission-net-uds.js‎
Copy file name to clipboard
+31Lines changed: 31 additions & 0 deletions
@@ -226,6 +226,9 @@ void PipeWrap::Connect(const FunctionCallbackInfo<Value>& args) {
   Local<Object> req_wrap_obj = args[0].As<Object>();
   node::Utf8Value name(env->isolate(), args[1]);
 
+  ERR_ACCESS_DENIED_IF_INSUFFICIENT_PERMISSIONS(
+      env, permission::PermissionScope::kNet, name.ToStringView(), args);
+
   ConnectWrap* req_wrap =
       new ConnectWrap(env, req_wrap_obj, AsyncWrap::PROVIDER_PIPECONNECTWRAP);
   int err = req_wrap->Dispatch(uv_pipe_connect2,
 
@@ -0,0 +1,31 @@
+// Flags: --permission --allow-fs-read=*
+'use strict';
+
+const common = require('../common');
+if (!common.hasCrypto) { common.skip('missing crypto'); };
+
+if (common.isWindows) {
+  common.skip('This test only works on unix');
+}
+
+const assert = require('assert');
+const net = require('net');
+const tls = require('tls');
+
+{
+  const client = net.connect({ path: '/tmp/perm.sock' });
+  client.on('error', common.mustCall((err) => {
+    assert.strictEqual(err.code, 'ERR_ACCESS_DENIED');
+  }));
+
+  client.on('connect', common.mustNotCall('TCP connection should be blocked'));
+}
+
+{
+  const client = tls.connect({ path: '/tmp/perm.sock' });
+  client.on('error', common.mustCall((err) => {
+    assert.strictEqual(err.code, 'ERR_ACCESS_DENIED');
+  }));
+
+  client.on('connect', common.mustNotCall('TCP connection should be blocked'));
+}