From df68d335c9c6fa8fd1638fb023b55f0993e43fe4 Mon Sep 17 00:00:00 2001 From: elijah Date: Wed, 10 Jul 2013 10:44:25 -0700 Subject: security fix - for a little while now, since the switch to rsync_command, permissions on rsync'ed files allowed world read. bad bad. now permissions are limited to root. --- lib/leap_cli/remote/rsync_plugin.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/leap_cli/remote/rsync_plugin.rb b/lib/leap_cli/remote/rsync_plugin.rb index 2c89f26..495ca1d 100644 --- a/lib/leap_cli/remote/rsync_plugin.rb +++ b/lib/leap_cli/remote/rsync_plugin.rb @@ -14,7 +14,7 @@ module LeapCli; module Remote; module RsyncPlugin # {:source => '', :dest => '', :flags => '', :includes => [], :excludes => []} # def update - rsync = RsyncCommand.new(:logger => logger, :flags => '-a') + rsync = RsyncCommand.new(:logger => logger, :flags => '-rltp --chmod=u+rX,go-rwx') rsync.asynchronously(find_servers) do |server| options = yield server next unless options -- cgit v1.2.3