From d9976818a4c6a12ea7088d63e6cd4d2f1afb7d5a Mon Sep 17 00:00:00 2001 From: Filip Valder Date: Fri, 25 Nov 2016 23:44:53 +0100 Subject: [PATCH] change security bits for cert_key_file --- module_build_service/manage.py | 1 + 1 file changed, 1 insertion(+) diff --git a/module_build_service/manage.py b/module_build_service/manage.py index ef657ffd..851edd21 100644 --- a/module_build_service/manage.py +++ b/module_build_service/manage.py @@ -252,6 +252,7 @@ def generatelocalhostcert(): cert_key.generate_key(crypto.TYPE_RSA, 2048) with open('/etc/module-build-service/server.key', 'w') as cert_key_file: + os.chmod(cert_key_file, 0o600) cert_key_file.write( crypto.dump_privatekey(crypto.FILETYPE_PEM, cert_key))