22 lines
858 B
Diff
22 lines
858 B
Diff
|
--- ddclient 2006-04-11 10:14:16.000000000 +0100
|
||
|
|
+++ ddclient 2006-04-11 20:31:14.000000000 +0100
|
||
|
|
@@ -776,15 +776,10 @@
|
||
|
|
# fatal("Cannot open file '%s'. ($!)", $file);
|
||
|
|
warning("Cannot open file '%s'. ($!)", $file);
|
||
|
|
}
|
||
|
|
- # Check for only owner has any access to config file
|
||
|
|
+ # Guard against world-readability of config file
|
||
|
|
my ($dev, $ino, $mode, @statrest) = stat(FD);
|
||
|
|
- if ($mode & 077) {
|
||
|
|
- if (-f FD && (chmod 0600, $file)) {
|
||
|
|
- warning("file $file must be accessible only by its owner (fixed).");
|
||
|
|
- } else {
|
||
|
|
- # fatal("file $file must be accessible only by its owner.");
|
||
|
|
- warning("file $file must be accessible only by its owner.");
|
||
|
|
- }
|
||
|
|
+ if ($mode & 007) {
|
||
|
|
+ fatal("Must not be world-accessible\nchange its permissions using e.g.\nchmod 640", $file);
|
||
|
|
}
|
||
|
|
|
||
|
|
local $lineno = 0;
|