all: adjust Unix permissions for those without umasks

Fixes tailscale/corp#1165

Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
This commit is contained in:
Brad Fitzpatrick 2021-01-11 19:16:14 -08:00 committed by Brad Fitzpatrick
parent 6b08303b0f
commit d6e9fb1df0
5 changed files with 6 additions and 6 deletions

View File

@ -140,7 +140,7 @@ func main() {
flag.Usage() flag.Usage()
os.Exit(2) os.Exit(2)
} }
if err := ioutil.WriteFile(output, out, 0666); err != nil { if err := ioutil.WriteFile(output, out, 0644); err != nil {
log.Fatal(err) log.Fatal(err)
} }
} }

View File

@ -97,7 +97,7 @@ func writeNewConfig() config {
if err != nil { if err != nil {
log.Fatal(err) log.Fatal(err)
} }
if err := atomicfile.WriteFile(*configPath, b, 0666); err != nil { if err := atomicfile.WriteFile(*configPath, b, 0600); err != nil {
log.Fatal(err) log.Fatal(err)
} }
return cfg return cfg

View File

@ -296,7 +296,7 @@ func SavePrefs(filename string, p *Prefs) {
log.Printf("Saving prefs %v %v\n", filename, p.Pretty()) log.Printf("Saving prefs %v %v\n", filename, p.Pretty())
data := p.ToBytes() data := p.ToBytes()
os.MkdirAll(filepath.Dir(filename), 0700) os.MkdirAll(filepath.Dir(filename), 0700)
if err := atomicfile.WriteFile(filename, data, 0666); err != nil { if err := atomicfile.WriteFile(filename, data, 0600); err != nil {
log.Printf("SavePrefs: %v\n", err) log.Printf("SavePrefs: %v\n", err)
} }
} }

View File

@ -131,11 +131,11 @@ func New(filePrefix string, opts Options) (f *Filch, err error) {
path1 := filePrefix + ".log1.txt" path1 := filePrefix + ".log1.txt"
path2 := filePrefix + ".log2.txt" path2 := filePrefix + ".log2.txt"
f1, err = os.OpenFile(path1, os.O_CREATE|os.O_RDWR, 0666) f1, err = os.OpenFile(path1, os.O_CREATE|os.O_RDWR, 0600)
if err != nil { if err != nil {
return nil, err return nil, err
} }
f2, err = os.OpenFile(path2, os.O_CREATE|os.O_RDWR, 0666) f2, err = os.OpenFile(path2, os.O_CREATE|os.O_RDWR, 0600)
if err != nil { if err != nil {
return nil, err return nil, err
} }

View File

@ -64,7 +64,7 @@ func listen(path string, port uint16) (ln net.Listener, _ uint16, err error) {
if err != nil { if err != nil {
return nil, 0, err return nil, 0, err
} }
os.Chmod(path, 0666) os.Chmod(path, 0600)
return pipe, 0, err return pipe, 0, err
} }