remove permissions from others.

git-svn-id: file:///svn/unbound/trunk@1371 be551aaa-1e26-0410-a405-d3ace91eadb9

diff --git a/doc/Changelog b/doc/Changelog
index 4f9a0b99133a5224c42b7fec5c16a8ca78b870c6..7d6bf888a0f331112e53e63b95ea5d2890f66d2c 100644 (file)
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -1,5 +1,7 @@
 21 November 2008: Wouter
        - fixed tcp accept, errors were printed when they should not.
+       - unbound-control-setup.sh removes read/write permissions other
+         from the keys it creates (as suggested by Dmitriy Demidov).
 
 20 November 2008: Wouter
        - fixup fatal error due to faulty error checking after tcp accept.

diff --git a/smallapp/unbound-control-setup.sh b/smallapp/unbound-control-setup.sh
index d8bf6c5929061530df6a33e4348916e1c6a9f7c1..ecdc5bb3e0d003a302ea4e18944e940870eb3627 100755 (executable)
--- a/smallapp/unbound-control-setup.sh
+++ b/smallapp/unbound-control-setup.sh
@@ -142,6 +142,9 @@ test -f $CTL_BASE.pem || error "could not create $CTL_BASE.pem"
 # echo "empty password is used, simply click OK on the password dialog box."
 # openssl pkcs12 -export -in $CTL_BASE"_trust.pem" -inkey $CTL_BASE.key -name "unbound remote control client cert" -out $CTL_BASE"_browser.pfx" -password "pass:" || error "could not create browser certificate"
 
+# remove unused permissions
+chmod o-rw $SVR_BASE.pem $SVR_BASE.key $CTL_BASE.pem $CTL_BASE.key
+
 # remove crap
 rm -f request.cfg
 rm -f $CTL_BASE"_trust.pem" $SVR_BASE"_trust.pem" $SVR_BASE"_trust.srl"