node.py: chmod the foolscap private key (node.pem) to 0600, since it's secret

diff --git a/src/allmydata/node.py b/src/allmydata/node.py
index aec6a70f96a28fbab3938d5474068e2685138d5b..f5e72770fa745052c67877c339fa5aec252040c8 100644 (file)
--- a/src/allmydata/node.py
+++ b/src/allmydata/node.py
@@ -32,6 +32,7 @@ class Node(service.MultiService):
         self._tub_ready_observerlist = observer.OneShotObserverList()
         certfile = os.path.join(self.basedir, self.CERTFILE)
         self.tub = Tub(certFile=certfile)
+        os.chmod(certfile, 0600)
         self.tub.setOption("logLocalFailures", True)
         self.tub.setOption("logRemoteFailures", True)
         self.nodeid = b32decode(self.tub.tubID.upper()) # binary format