kata-containers/s390-tools
1
0
Fork 0
mirror of https://github.com/ibm-s390-linux/s390-tools.git synced 2026-08-05 02:14:52 +00:00
Code Issues Packages Projects Releases Wiki Activity

zkey: properly set umask to prohibit permissions to group and others

Browse Source 
Set the umask for the zkey process to clear permissions for genernated
secure key files for group and others.

Signed-off-by: Hendrik Brueckner <brueckner@linux.vnet.ibm.com>
Signed-off-by: Michael Holzheu <holzheu@linux.vnet.ibm.com>
This commit is contained in:
Hendrik Brueckner
2017-08-18 12:20:59 +02:00
committed by Michael Holzheu
parent b53793d1b6
commit fe0b2d96f7
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
zkey/zkey.c
View File

@@ -1108,6 +1108,8 @@ int main(int argc, char *argv[])
goto out;
}
umask(S_IRWXG|S_IRWXO);
rc = command->function(keyfile);
out: