mirror/stackexchange-dnscontrol
1
0
Fork 0
mirror of https://github.com/StackExchange/dnscontrol.git synced 2024-05-11 05:55:12 +00:00
Code Issues Releases Activity

'get-certs' permissions too open (#745)

Browse Source 
Fixes https://github.com/StackExchange/dnscontrol/issues/728
This commit is contained in:
Tom Limoncelli
2020-05-22 10:26:22 -04:00
committed by GitHub
parent 524f346943
commit 87607da685
1 changed files with 1 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
pkg/acme/directoryStorage.go
View File

@ -34,8 +34,7 @@ func (d directoryStorage) accountKeyFile(acmeHost string) string {
return filepath.Join(d.accountDirectory(acmeHost), "account.key") return filepath.Join(d.accountDirectory(acmeHost), "account.key")
} }
// TODO: probably lock these down more const perms os.FileMode = 0600
const perms os.FileMode = 0644
const dirPerms os.FileMode = 0700 const dirPerms os.FileMode = 0700
func (d directoryStorage) GetCertificate(name string) (*certificate.Resource, error) { func (d directoryStorage) GetCertificate(name string) (*certificate.Resource, error) {