set permissions for config dir, sqlite database and private keys - read-write only for owner

2 files changed, 5 insertions, 0 deletions

diff --git a/pica-client/dialogs/registeraccountdialog.cpp b/pica-client/dialogs/registeraccountdialog.cpp
index 090cfe3..bfa4db4 100644
--- a/pica-client/dialogs/registeraccountdialog.cpp
+++ b/pica-client/dialogs/registeraccountdialog.cpp
@@ -2,6 +2,7 @@
 #include "../globals.h"
 #include <QVBoxLayout>
 #include <QDir>
+#include <QFile>
 #include <QMessageBox>
 
 
@@ -172,6 +173,8 @@ void RegisterAccountDialog::stageSignCert(int retval, QProcess::ExitStatus)
 		return;
 	}
 
+	QFile::setPermissions(config_dir + QDir::separator() + "privkey.pem", QFile::ReadOwner | QFile::WriteOwner);
+
 	lbStatus->setText(tr("2) Signing certificate..."));
 
 	ost.GenCertSignal(config_dir + QDir::separator() + "cert.pem",
diff --git a/pica-client/main.cpp b/pica-client/main.cpp
index d75e84e..f974511 100644
--- a/pica-client/main.cpp
+++ b/pica-client/main.cpp
@@ -417,6 +417,7 @@ static bool create_config_dir()
 			return false;
 		}
 	}
+	QFile::setPermissions(config_dir, QFile::ReadOwner | QFile::WriteOwner);
 
 	config_dbname = config_dir + QDir::separator() + QString(PICA_CLIENT_STORAGEDB);
 
@@ -431,6 +432,7 @@ static bool create_config_dir()
 	else
 		update_database();
 
+	QFile::setPermissions(config_dbname, QFile::ReadOwner | QFile::WriteOwner);
 	/*if (!QFile::exists(config_dir + QDir::separator() + PICA_CLIENT_DHPARAMFILE))
 	{
 	    OpenSSLTool osslt;