From c434de4d83ccfaca8bde51de5c2ac8d9656e4e18 Mon Sep 17 00:00:00 2001 From: Werner Koch Date: Wed, 25 Jun 2014 20:25:28 +0200 Subject: gpg: Create exported secret files and revocs with mode 700. * common/iobuf.c (direct_open): Add arg MODE700. (iobuf_create): Ditto. * g10/openfile.c (open_outfile): Add arg RESTRICTEDPERM. Change call callers to pass 0 for it. * g10/revoke.c (gen_desig_revoke, gen_revoke): Here pass true for new arg. * g10/export.c (do_export): Pass true for new arg if SECRET is true. -- GnuPG-bug-id: 1653. Note that this works only if --output has been used. --- common/iobuf.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'common/iobuf.h') diff --git a/common/iobuf.h b/common/iobuf.h index d3f55206e..ef055477e 100644 --- a/common/iobuf.h +++ b/common/iobuf.h @@ -115,7 +115,7 @@ iobuf_t iobuf_fdopen (int fd, const char *mode); iobuf_t iobuf_fdopen_nc (int fd, const char *mode); iobuf_t iobuf_esopen (estream_t estream, const char *mode, int keep_open); iobuf_t iobuf_sockopen (int fd, const char *mode); -iobuf_t iobuf_create (const char *fname); +iobuf_t iobuf_create (const char *fname, int mode700); iobuf_t iobuf_append (const char *fname); iobuf_t iobuf_openrw (const char *fname); int iobuf_ioctl (iobuf_t a, iobuf_ioctl_t cmd, int intval, void *ptrval); -- cgit v1.2.3