I was reviewing retroshare-nogui/src/introserver.cc and in the
function RsIntroServer::RsIntroServer(), I saw the following code:

    // chmod certsDir -> so WebServer can write to it.
    // might be UNIX specific!
    chmod(certsDir.c_str(), S_IRWXU | S_IRWXG | S_IRWXO);

That is, the certs directory is changed to mode 0777!

Making this directory world readable and writable seems pretty
dangerous.  I haven't yet figured out what is stored in here, but the
name suggests that it is something pretty important.  Can you allay my


:) Neal

Is your legacy SCM system holding you back? Join Perforce May 7 to find out:
• 3 signs your SCM is hindering your productivity
• Requirements for releasing software faster
• Expert tips and advice for migrating your SCM now
Retroshare-devel mailing list

Reply via email to