Hi,

I was reviewing retroshare-nogui/src/introserver.cc and in the
function RsIntroServer::RsIntroServer(), I saw the following code:

    // chmod certsDir -> so WebServer can write to it.
    // might be UNIX specific!
    chmod(certsDir.c_str(), S_IRWXU | S_IRWXG | S_IRWXO);

That is, the certs directory is changed to mode 0777!

Making this directory world readable and writable seems pretty
dangerous.  I haven't yet figured out what is stored in here, but the
name suggests that it is something pretty important.  Can you allay my
fears?

Thanks!

:) Neal


------------------------------------------------------------------------------
Is your legacy SCM system holding you back? Join Perforce May 7 to find out:
• 3 signs your SCM is hindering your productivity
• Requirements for releasing software faster
• Expert tips and advice for migrating your SCM now
http://p.sf.net/sfu/perforce
_______________________________________________
Retroshare-devel mailing list
Retroshare-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/retroshare-devel

Reply via email to