github/repmgr
1
0
Fork 0
mirror of https://github.com/EnterpriseDB/repmgr.git synced 2026-03-27 00:46:29 +00:00
Code Issues Packages Projects Releases 1 Wiki Activity

repmgr: Explicitly set permissions on recovery.conf to 0600

Browse Source 
Per GitHub #236 (dmarck)
This commit is contained in:
Ian Barwick
2016-09-09 11:39:55 +09:00
parent cc3c2f5073
commit ac8910000f
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
repmgr.c
View File

@@ -5379,10 +5379,15 @@ create_recovery_file(const char *data_dir, t_conninfo_param_list *upstream_conni
FILE *recovery_file; FILE *recovery_file;
char recovery_file_path[MAXLEN]; char recovery_file_path[MAXLEN];
char line[MAXLEN]; char line[MAXLEN];
mode_t um;
maxlen_snprintf(recovery_file_path, "%s/%s", data_dir, RECOVERY_COMMAND_FILE); maxlen_snprintf(recovery_file_path, "%s/%s", data_dir, RECOVERY_COMMAND_FILE);
/* Set umask to 0600 */
um = umask((~(S_IRUSR | S_IWUSR)) & (S_IRWXG | S_IRWXO));
recovery_file = fopen(recovery_file_path, "w"); recovery_file = fopen(recovery_file_path, "w");
umask(um);
if (recovery_file == NULL) if (recovery_file == NULL)
{ {
log_err(_("unable to create recovery.conf file at '%s'\n"), recovery_file_path); log_err(_("unable to create recovery.conf file at '%s'\n"), recovery_file_path);