diff options
| author |   millert <millert@openbsd.org> | 1997-07-23 03:52:11 +0000 |
|---|---|---|
| committer | millert <millert@openbsd.org> | 1997-07-23 03:52:11 +0000 |
| commit | 0fb91e4c37f34e72a64f90f41ffd6a854abd25b7 (patch) | |
| tree | 011946290955bcc364bfc9750d9e15447993a8c8 /lib/libskey/skeylogin.c | |
| parent | AppleTalk support based on netatalk-1.4a2 and FreeBSD. (diff) | |
| download | wireguard-openbsd-0fb91e4c37f34e72a64f90f41ffd6a854abd25b7.tar.xz wireguard-openbsd-0fb91e4c37f34e72a64f90f41ffd6a854abd25b7.zip | |
Mode 0600 /etc/skeykeys
Diffstat (limited to 'lib/libskey/skeylogin.c')
| -rw-r--r-- | lib/libskey/skeylogin.c | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/lib/libskey/skeylogin.c b/lib/libskey/skeylogin.c index 146ad082db4..ce2aca19eff 100644 --- a/lib/libskey/skeylogin.c +++ b/lib/libskey/skeylogin.c @@ -8,7 +8,7 @@ * * S/KEY verification check, lookups, and authentication. * - * $Id: skeylogin.c,v 1.12 1997/07/10 21:11:11 millert Exp $ + * $Id: skeylogin.c,v 1.13 1997/07/23 03:52:12 millert Exp $ */ #include <sys/param.h> @@ -123,10 +123,12 @@ skeylookup(mp, name) if (stat(_PATH_KEYFILE, &statbuf) == -1 && errno == ENOENT) { mp->keyfile = fopen(_PATH_KEYFILE, "w+"); if (mp->keyfile) - chmod(_PATH_KEYFILE, 0644); + fchmod(fileno(mp->keyfile), 0600); } else { /* Otherwise open normally for update */ mp->keyfile = fopen(_PATH_KEYFILE, "r+"); + if (mp->keyfile && (statbuf.st_mode & 0007777) != 0600) + fchmod(fileno(mp->keyfile), 0600); } if (mp->keyfile == NULL) return -1; |