From: Miroslav Lichvar <mlichvar@redhat.com>
Date: Wed, 8 Jul 2020 15:02:32 +0000 (+0200)
Subject: conf: restrict permissions of created directories
X-Git-Tag: 4.0-pre3~57
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=3bdcce6903850552c1b869447497d6e0ed2dfa3b;p=thirdparty%2Fchrony.git

conf: restrict permissions of created directories

If logdir or dumpdir doesn't exist, create the directory with no
permissions for other users (mode 0750 instead of 0755).
---

diff --git a/conf.c b/conf.c
index 2e994dcb..20ce93bb 100644
--- a/conf.c
+++ b/conf.c
@@ -1766,9 +1766,9 @@ CNF_CreateDirs(uid_t uid, gid_t gid)
   }
 
   if (logdir)
-    UTI_CreateDirAndParents(logdir, 0755, uid, gid);
+    UTI_CreateDirAndParents(logdir, 0750, uid, gid);
   if (dumpdir)
-    UTI_CreateDirAndParents(dumpdir, 0755, uid, gid);
+    UTI_CreateDirAndParents(dumpdir, 0750, uid, gid);
 }
 
 /* ================================================== */