Fixed: Permission policy hardening (iMSCP::Composer)

i-MSCP · Oct 23, 2017 · 3dec2cb · 3dec2cb
1 parent 66ce2be
commit 3dec2cb
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/engine/PerlLib/iMSCP/Composer.pm b/engine/PerlLib/iMSCP/Composer.pm
@@ -220,7 +220,7 @@ sub installPackages
     $file->set( $self->getComposerJson());
     my $rs = $file->save();
     $rs ||= $file->owner( $self->{'_attrs'}->{'user'}, $self->{'_attrs'}->{'group'} );
-    $rs ||= $file->mode( 0644 );
+    $rs ||= $file->mode( 0640 );
     $rs == 0 or die( getMessageByType( 'error', { amount => 1, remove => 1 } ));
     $rs = executeNoWait(
         $self->_getSuCmd(