change security bits for cert_key_file

2026-04-08 05:08:45 +08:00 · 2016-11-25 23:44:53 +01:00
parent b6000b2df8
commit d9976818a4
1 changed files with 1 additions and 0 deletions
--- a/module_build_service/manage.py
+++ b/module_build_service/manage.py
@@ -252,6 +252,7 @@ def generatelocalhostcert():
    cert_key.generate_key(crypto.TYPE_RSA, 2048)

    with open('/etc/module-build-service/server.key', 'w') as cert_key_file:
+        os.chmod(cert_key_file, 0o600)
        cert_key_file.write(
            crypto.dump_privatekey(crypto.FILETYPE_PEM, cert_key))