From: intrigeri <intrigeri@758a04ac-41e6-0310-8a23-8373a73cc35d>
Date: Wed, 25 Jun 2008 09:54:45 +0000 (+0000)
Subject: dup: set secure permissions on tmpdir when creating it
X-Git-Url: https://git.stderr.nl/gitweb?a=commitdiff_plain;h=ea85d214451075abee06c9f48de65ba269604c15;p=matthijs%2Fupstream%2Fbackupninja.git

dup: set secure permissions on tmpdir when creating it

git-svn-id: http://code.autistici.org/svn/backupninja/trunk@592 758a04ac-41e6-0310-8a23-8373a73cc35d
---

diff --git a/ChangeLog b/ChangeLog
index 73a38f1..e1a88f4 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -21,8 +21,8 @@ version 0.9.6 -- unreleased
 	   new syntax.
 	 . Support every duplicity-supported transport with new configuration
 	   option desturl (Closes: #483712, #346040, Trac#2).
-	 .
-	Actually allow to backup only VServers, by relaxing $include test.
+	 . Actually allow to backup only VServers, by relaxing $include test.
+	 . Set secure permissions on tmpdir when creating it.
 	ldap:
 	 . support HDB backend just as the BDB one, and make message clearer
 	   when no supported backend is found (Closes: #476910)
diff --git a/handlers/dup.in b/handlers/dup.in
index 2854974..89db671 100644
--- a/handlers/dup.in
+++ b/handlers/dup.in
@@ -166,6 +166,7 @@ if [ -n "$tmpdir" ]; then
       info "Temporary directory ($tmpdir) does not exist, creating it."
       mkdir -p "$tmpdir"
       [ $? -eq 0 ] || fatal "Could not create temporary directory ($tmpdir)."
+      chmod 0700 "$tmpdir"
    fi
    info "Using $tmpdir as TMPDIR"
    precmd="${precmd}TMPDIR=$tmpdir "