From c03fa0abbd0d1312ef01e3ac49c16c42ad4dd06e Mon Sep 17 00:00:00 2001
From: Pete Fritchman <petef@databits.net>
Date: Wed, 19 Oct 2011 11:48:25 -0700
Subject: [PATCH] keep the secrets file mode 600
Signed-off-by: Lloyd Hilaiel <lloyd@hilaiel.com>
---
libs/secrets.js | 2 ++
1 file changed, 2 insertions(+)
diff --git a/libs/secrets.js b/libs/secrets.js
index 46ea829f2..0b404f615 100644
--- a/libs/secrets.js
+++ b/libs/secrets.js
@@ -57,6 +57,8 @@ exports.hydrateSecret = function(name, dir) {
if (secret === undefined) {
secret = exports.generate(128);
+ fs.writeFileSync(p, '');
+ fs.chmodSync(p, 0600);
fs.writeFileSync(p, secret);
}
return secret;
--
GitLab