mirrors
/
forgejo
mirror of
1
Fork 0
Code Issues Releases Activity

Make app.ini more restrictive on new installations (#16266) 

Signed-off-by: Steven Kriegler <61625851+justusbunsi@users.noreply.github.com>
This commit is contained in:
Steven 2021-06-27 12:07:36 +02:00 committed by GitHub
parent 35f37a3625
commit f533b5d5cf
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 13 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
modules/setting/setting.go
View File

@ -1159,6 +1159,19 @@ func CreateOrAppendToCustomConf(callback func(cfg *ini.File)) {
if err := cfg.SaveTo(CustomConf); err != nil { if err := cfg.SaveTo(CustomConf); err != nil {
log.Fatal("error saving to custom config: %v", err) log.Fatal("error saving to custom config: %v", err)
} }
// Change permissions to be more restrictive
fi, err := os.Stat(CustomConf)
if err != nil {
log.Error("Failed to determine current conf file permissions: %v", err)
return
}
if fi.Mode().Perm() > 0o600 {
if err = os.Chmod(CustomConf, 0o600); err != nil {
log.Warn("Failed changing conf file permissions to -rw-------. Consider changing them manually.")
}
}
} }
// NewServices initializes the services // NewServices initializes the services