Skip to content

Conversation

@shwstppr
Copy link
Contributor

@shwstppr shwstppr commented Aug 4, 2025

Fixes #157

Copy link
Contributor

@DaanHoogland DaanHoogland left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

clgtm

@DaanHoogland DaanHoogland self-requested a review August 5, 2025 13:56
@DaanHoogland
Copy link
Contributor

works as expected but I want to sugest being a touch more restrictive in the access rights, i.e. no group access.

@DaanHoogland DaanHoogland requested a review from Copilot August 6, 2025 05:34
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR fixes file access permissions for configuration and history files by setting them to group-private mode (0660). The changes ensure that sensitive configuration data is protected from unauthorized access by restricting permissions.

  • Introduces a new makeFileGroupPrivate function to set file permissions to 0660
  • Applies permission fixes to both config and history files after they are saved
  • Adds conditional permission setting for history files when they exist

Signed-off-by: Abhishek Kumar <[email protected]>
@shwstppr shwstppr marked this pull request as ready for review August 6, 2025 12:06
@shwstppr shwstppr added this to the 6.5.0 milestone Aug 6, 2025
@shwstppr shwstppr merged commit 4673829 into apache:main Aug 7, 2025
1 check passed
shwstppr added a commit to shwstppr/cloudstack-cloudmonkey that referenced this pull request Aug 13, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

apikey and secretkey stored in plain text in (world readable) history file

3 participants