Browse Source

Make app.ini more restrictive on new installations (#16266)

Signed-off-by: Steven Kriegler <61625851+justusbunsi@users.noreply.github.com>
master
Steven 1 year ago
committed by GitHub
parent
commit
f533b5d5cf
No known key found for this signature in database GPG Key ID: 4AEE18F83AFDEB23
  1. 13
      modules/setting/setting.go

13
modules/setting/setting.go

@ -1159,6 +1159,19 @@ func CreateOrAppendToCustomConf(callback func(cfg *ini.File)) {
if err := cfg.SaveTo(CustomConf); err != nil {
log.Fatal("error saving to custom config: %v", err)
}
// Change permissions to be more restrictive
fi, err := os.Stat(CustomConf)
if err != nil {
log.Error("Failed to determine current conf file permissions: %v", err)
return
}
if fi.Mode().Perm() > 0o600 {
if err = os.Chmod(CustomConf, 0o600); err != nil {
log.Warn("Failed changing conf file permissions to -rw-------. Consider changing them manually.")
}
}
}
// NewServices initializes the services

Loading…
Cancel
Save