From: Brian Warner <warner@allmydata.com>
Date: Fri, 21 Sep 2007 23:52:55 +0000 (-0700)
Subject: node.py: chmod the foolscap private key (node.pem) to 0600, since it's secret
X-Git-Tag: allmydata-tahoe-0.6.0~18
X-Git-Url: https://git.rkrishnan.org/configuration.rst?a=commitdiff_plain;h=325c7a7bfac9d288ad75bbbd6f963860b6b6f38e;p=tahoe-lafs%2Ftahoe-lafs.git

node.py: chmod the foolscap private key (node.pem) to 0600, since it's secret
---

diff --git a/src/allmydata/node.py b/src/allmydata/node.py
index aec6a70f..f5e72770 100644
--- a/src/allmydata/node.py
+++ b/src/allmydata/node.py
@@ -32,6 +32,7 @@ class Node(service.MultiService):
         self._tub_ready_observerlist = observer.OneShotObserverList()
         certfile = os.path.join(self.basedir, self.CERTFILE)
         self.tub = Tub(certFile=certfile)
+        os.chmod(certfile, 0600)
         self.tub.setOption("logLocalFailures", True)
         self.tub.setOption("logRemoteFailures", True)
         self.nodeid = b32decode(self.tub.tubID.upper()) # binary format