Update /conf file permissions

Signed-off-by: Utkarsh Bhatt <[email protected]>
UtkarshBhatthere · Aug 29, 2023 · f855a80 · f855a80
1 parent 9c3d9bf
commit f855a80
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/microceph/ceph/configwriter.go b/microceph/ceph/configwriter.go
@@ -26,7 +26,8 @@ func (c *Config) GetPath() string {
 
 // WriteConfig writes the configuration file given a data bag
 func (c *Config) WriteConfig(data map[string]any) error {
-	fd, err := os.OpenFile(c.GetPath(), os.O_CREATE|os.O_TRUNC|os.O_RDWR, 0644)
+	mode := int(0640) // rw: user, r: group, others: none.
+	fd, err := os.OpenFile(c.GetPath(), os.O_CREATE|os.O_TRUNC|os.O_RDWR, os.FileMode(mode))
 	if err != nil {
 		return fmt.Errorf("Couldn't write %s: %w", c.configFile, err)
 	}

diff --git a/microceph/ceph/testutils.go b/microceph/ceph/testutils.go
@@ -84,7 +84,7 @@ func copyTestConf(dir string, conf string) error {
 	if err != nil {
 		return err
 	}
-	err = os.WriteFile(filepath.Join(dir, "SNAP_DATA", "conf", conf), source, 0644)
+	err = os.WriteFile(filepath.Join(dir, "SNAP_DATA", "conf", conf), source, 0640)
 	if err != nil {
 		return err
 	}