Private files saved on Unix should have mode 0600, not 0700. They're

generally private-key files, which have no need to be executable.

[originally from svn r9321]

diff --git a/unix/uxmisc.c b/unix/uxmisc.c
index 7d577f96d3e147fdb2f8e8a695101f589b3c9dbb..8441349b34319e7c6c6eb52627e8576ad8965d9c 100644 (file)
--- a/unix/uxmisc.c
+++ b/unix/uxmisc.c
@@ -174,7 +174,7 @@ FILE *f_open(const Filename *filename, char const *mode, int is_private)
        int fd;
        assert(mode[0] == 'w');        /* is_private is meaningless for read,
                                          and tricky for append */
-       fd = open(filename->path, O_WRONLY | O_CREAT | O_TRUNC, 0700);
+       fd = open(filename->path, O_WRONLY | O_CREAT | O_TRUNC, 0600);
        if (fd < 0)
            return NULL;
        return fdopen(fd, mode);