From 242971667b66fea86d4cfb5a4d0a396e5a7b5e8b Mon Sep 17 00:00:00 2001
From: Lennart Poettering <lennart@poettering.net>
Date: Tue, 11 Aug 2009 03:54:57 +0200
Subject: make CK database world readable

The CK database shall be readable by the D-Bus daemon which runs under
its own user id hence make sure it is readable for non-root processes.

To make sure this leaks no information this drops the session cookie
from the database.
---
 src/ck-manager.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'src/ck-manager.c')

diff --git a/src/ck-manager.c b/src/ck-manager.c
index bb65d73..d5d2c65 100644
--- a/src/ck-manager.c
+++ b/src/ck-manager.c
@@ -200,7 +200,7 @@ ck_manager_dump (CkManager *manager)
                 return;
         }
 
-        fd = g_open (filename_tmp, O_CREAT | O_WRONLY, 0600);
+        fd = g_open (filename_tmp, O_CREAT | O_WRONLY, 0644);
         if (fd == -1) {
                 g_warning ("Cannot create file %s: %s", filename_tmp, g_strerror (errno));
                 goto error;
-- 
cgit