Skip to content

Files created by \Icinga\File\Storage\LocalFileStorage shouldn't be world readable #5383

@nilmerg

Description

@nilmerg

Is your feature request related to a problem? Please describe.

\Icinga\File\Storage\LocalFileStorage creates directories with the permission 2770. Files on the other hand, will use 0664.

Describe the solution you'd like

Files should be created with 0660 instead. This change should be safe, since no-one except owner and group members have directory access anyway.

Additional context

Icinga DB Web puts a user's configuration files in /var/lib/icingaweb2, by using said class, and should automatically benefit from this change.

Metadata

Metadata

Assignees

No one assigned

    Type

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions