aboutsummaryrefslogtreecommitdiff
path: root/lib/leap_cli/config/macros.rb
diff options
context:
space:
mode:
authorelijah <elijah@riseup.net>2013-07-29 20:38:58 -0700
committerelijah <elijah@riseup.net>2013-07-29 20:38:58 -0700
commite00e5d2b501a0d2727ea84fb1ea3e597e1e37ee4 (patch)
tree92901eec53f76e7bc617e47001977cb1b0b614fe /lib/leap_cli/config/macros.rb
parent0f92af724ebab6416fc641b57f0a6d43614c25da (diff)
downloadleap_cli-e00e5d2b501a0d2727ea84fb1ea3e597e1e37ee4.tar.gz
leap_cli-e00e5d2b501a0d2727ea84fb1ea3e597e1e37ee4.tar.bz2
security fix - don't allow leap_cli created files to be world/group readable.
Diffstat (limited to 'lib/leap_cli/config/macros.rb')
-rw-r--r--lib/leap_cli/config/macros.rb4
1 files changed, 2 insertions, 2 deletions
diff --git a/lib/leap_cli/config/macros.rb b/lib/leap_cli/config/macros.rb
index b5f6a34..ef3a85e 100644
--- a/lib/leap_cli/config/macros.rb
+++ b/lib/leap_cli/config/macros.rb
@@ -97,8 +97,8 @@ module LeapCli; module Config
# if file is under Path.provider_base, we must copy the default file to
# to Path.provider in order for rsync to be able to sync the file.
local_provider_path = actual_path.sub(/^#{Regexp.escape(Path.provider_base)}/, Path.provider)
- FileUtils.mkdir_p File.dirname(local_provider_path)
- FileUtils.cp_r actual_path, local_provider_path
+ FileUtils.mkdir_p File.dirname(local_provider_path), :mode => 0700
+ FileUtils.install actual_path, local_provider_path, :mode => 0600
Util.log :created, Path.relative_path(local_provider_path)
actual_path = local_provider_path
end