mirror of
https://github.com/zhom/donutbrowser.git
synced 2026-07-17 01:47:25 +02:00
security: restrict secret files to owner-only (0600)
This commit is contained in:
@@ -266,7 +266,8 @@ impl SettingsManager {
|
||||
file_data.extend_from_slice(&(ciphertext.len() as u32).to_le_bytes());
|
||||
file_data.extend_from_slice(&ciphertext);
|
||||
|
||||
std::fs::write(token_file, file_data)?;
|
||||
std::fs::write(&token_file, file_data)?;
|
||||
crate::app_dirs::restrict_to_owner(std::path::Path::new(&token_file));
|
||||
Ok(())
|
||||
}
|
||||
|
||||
@@ -434,7 +435,8 @@ impl SettingsManager {
|
||||
file_data.extend_from_slice(&(ciphertext.len() as u32).to_le_bytes());
|
||||
file_data.extend_from_slice(&ciphertext);
|
||||
|
||||
std::fs::write(token_file, file_data)?;
|
||||
std::fs::write(&token_file, file_data)?;
|
||||
crate::app_dirs::restrict_to_owner(std::path::Path::new(&token_file));
|
||||
Ok(())
|
||||
}
|
||||
|
||||
@@ -573,7 +575,8 @@ impl SettingsManager {
|
||||
file_data.extend_from_slice(&(ciphertext.len() as u32).to_le_bytes());
|
||||
file_data.extend_from_slice(&ciphertext);
|
||||
|
||||
std::fs::write(token_file, file_data)?;
|
||||
std::fs::write(&token_file, file_data)?;
|
||||
crate::app_dirs::restrict_to_owner(std::path::Path::new(&token_file));
|
||||
Ok(())
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user