Merge pull request #444 from Spitfireap/tighter-config-file-perm

tighter config file permission
This commit is contained in:
Antoine Nguyen
2022-11-03 12:20:25 +01:00
committed by GitHub

View File

@@ -2,10 +2,13 @@
import contextlib import contextlib
import datetime import datetime
import getpass
import glob import glob
import os import os
import pwd
import random import random
import shutil import shutil
import stat
import string import string
import subprocess import subprocess
import sys import sys
@@ -327,3 +330,11 @@ def gen_config(dest, interactive=False):
with open(dest, "w") as configfile: with open(dest, "w") as configfile:
config.write(configfile) config.write(configfile)
# Set file owner to running user and group, and set config file permission to 600
current_username = getpass.getuser()
current_user = pwd.getpwnam(current_username)
os.chown(dest, current_user[2], current_user[3])
os.chmod(dest, stat.S_IRUSR|stat.S_IWUSR)