]> git.ipfire.org Git - thirdparty/chrony.git/commitdiff
conf: restrict permissions of created directories
authorMiroslav Lichvar <mlichvar@redhat.com>
Wed, 8 Jul 2020 15:02:32 +0000 (17:02 +0200)
committerMiroslav Lichvar <mlichvar@redhat.com>
Thu, 9 Jul 2020 12:47:33 +0000 (14:47 +0200)
If logdir or dumpdir doesn't exist, create the directory with no
permissions for other users (mode 0750 instead of 0755).

conf.c

diff --git a/conf.c b/conf.c
index 2e994dcbf9a1b6e457ef3b3b09655ea91c502abf..20ce93bbf85f2ba0fd862bb5dd077a363790c8d1 100644 (file)
--- a/conf.c
+++ b/conf.c
@@ -1766,9 +1766,9 @@ CNF_CreateDirs(uid_t uid, gid_t gid)
   }
 
   if (logdir)
-    UTI_CreateDirAndParents(logdir, 0755, uid, gid);
+    UTI_CreateDirAndParents(logdir, 0750, uid, gid);
   if (dumpdir)
-    UTI_CreateDirAndParents(dumpdir, 0755, uid, gid);
+    UTI_CreateDirAndParents(dumpdir, 0750, uid, gid);
 }
 
 /* ================================================== */