repmgr: Explicitly set permissions on recovery.conf to 0600

Per GitHub #236 (dmarck)
This commit is contained in:
Ian Barwick
2016-09-09 11:39:55 +09:00
parent cc3c2f5073
commit ac8910000f

View File

@@ -5379,10 +5379,15 @@ create_recovery_file(const char *data_dir, t_conninfo_param_list *upstream_conni
FILE *recovery_file;
char recovery_file_path[MAXLEN];
char line[MAXLEN];
mode_t um;
maxlen_snprintf(recovery_file_path, "%s/%s", data_dir, RECOVERY_COMMAND_FILE);
/* Set umask to 0600 */
um = umask((~(S_IRUSR | S_IWUSR)) & (S_IRWXG | S_IRWXO));
recovery_file = fopen(recovery_file_path, "w");
umask(um);
if (recovery_file == NULL)
{
log_err(_("unable to create recovery.conf file at '%s'\n"), recovery_file_path);