Stop to use world writable permission for newly created files

If process don't have umask (= umask(0)) such as daemon mode groonga-httpd, newly created files have world writable permission. It's not good for security reason. It's backward incompatibility change.
groonga · Dec 29, 2014 · 7286bca · 7286bca
1 parent a15474e
commit 7286bca
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/lib/dat/file-impl.cpp b/lib/dat/file-impl.cpp
@@ -39,7 +39,7 @@
 #ifdef WIN32
 # define GRN_IO_FILE_CREATE_MODE (GENERIC_READ | GENERIC_WRITE)
 #else /* WIN32 */
-# define GRN_IO_FILE_CREATE_MODE 0666
+# define GRN_IO_FILE_CREATE_MODE 0644
 #endif /* WIN32 */
 
 namespace grn {

diff --git a/lib/grn_io.h b/lib/grn_io.h
@@ -41,7 +41,7 @@ extern "C" {
 #ifdef WIN32
 # define GRN_IO_FILE_CREATE_MODE (GENERIC_READ | GENERIC_WRITE)
 #else /* WIN32 */
-# define GRN_IO_FILE_CREATE_MODE 0666
+# define GRN_IO_FILE_CREATE_MODE 0644
 #endif /* WIN32 */
 
 typedef enum {