From 325c7a7bfac9d288ad75bbbd6f963860b6b6f38e Mon Sep 17 00:00:00 2001
From: Brian Warner <warner@allmydata.com>
Date: Fri, 21 Sep 2007 16:52:55 -0700
Subject: [PATCH] node.py: chmod the foolscap private key (node.pem) to 0600,
since it's secret
---
src/allmydata/node.py | 1 +
1 file changed, 1 insertion(+)
diff --git a/src/allmydata/node.py b/src/allmydata/node.py
index aec6a70f..f5e72770 100644
--- a/src/allmydata/node.py
+++ b/src/allmydata/node.py
@@ -32,6 +32,7 @@ class Node(service.MultiService):
self._tub_ready_observerlist = observer.OneShotObserverList()
certfile = os.path.join(self.basedir, self.CERTFILE)
self.tub = Tub(certFile=certfile)
+ os.chmod(certfile, 0600)
self.tub.setOption("logLocalFailures", True)
self.tub.setOption("logRemoteFailures", True)
self.nodeid = b32decode(self.tub.tubID.upper()) # binary format
--
2.45.2