consider the ssh command:
sudo ssh -L /my/local/sock:/var/remote_socket me@remote
This runs as root, so the created local unix domain socket has ownership root and 0600 permissions.
How do I tell ssh to create the socket with wider permissions?