Explorar el Código

corosync_ring_id_store: Use safer permissions

corosync_ring_id_store should use same (safer) permissions as
corosync_ring_id_create_or_load for (eventually) newly created ringid
file.

Credit to Sjerek for finding this problem.

Signed-off-by: Jan Friesse <jfriesse@redhat.com>
Reviewed-by: Christine Caulfield <ccaulfie@redhat.com>
Jan Friesse hace 11 años
padre
commit
252b38ab8a
Se han modificado 1 ficheros con 2 adiciones y 2 borrados
  1. 2 2
      exec/main.c

+ 2 - 2
exec/main.c

@@ -782,9 +782,9 @@ static void corosync_ring_id_store (
 	snprintf (filename, sizeof(filename), "%s/ringid_%s",
 	snprintf (filename, sizeof(filename), "%s/ringid_%s",
 		get_run_dir(), totemip_print (addr));
 		get_run_dir(), totemip_print (addr));
 
 
-	fd = open (filename, O_WRONLY, 0777);
+	fd = open (filename, O_WRONLY, 0700);
 	if (fd == -1) {
 	if (fd == -1) {
-		fd = open (filename, O_CREAT|O_RDWR, 0777);
+		fd = open (filename, O_CREAT|O_RDWR, 0700);
 	}
 	}
 	if (fd == -1) {
 	if (fd == -1) {
 		LOGSYS_PERROR(errno, LOGSYS_LEVEL_ERROR,
 		LOGSYS_PERROR(errno, LOGSYS_LEVEL_ERROR,