From: Jaco Kroon <jaco@uls.co.za>
Date: Sat, 18 Sep 2021 02:02:54 +0000 (+0200)
Subject: radattr: tighten permissions on radattr file to avoid information leakage. (#290)
X-Git-Tag: ppp-2.5.0~58
X-Git-Url: http://git.ozlabs.org/?a=commitdiff_plain;h=7adcfc961d3ccb051da87cc95d76cd3344f00fb8;hp=7adcfc961d3ccb051da87cc95d76cd3344f00fb8;p=ppp.git

radattr: tighten permissions on radattr file to avoid information leakage. (#290)

Depending on the invoking process's umask it's possible that the radattr
file (which in certain cases can contain crytographic keys) be stored
with permissions such that world-read access is possible, resulting in
sensitive information being leaked to local users.

Signed-off-by: Jaco Kroon <jaco@uls.co.za>
Co-authored-by: Jaco Kroon <jaco@iewc.co.za>
---