From 9a81afeaecdc113a0e6a046577cc64379ce31116 Mon Sep 17 00:00:00 2001 From: Anton Date: Tue, 19 Jun 2018 02:04:48 +0400 Subject: set permissions for config dir, sqlite database and private keys - read-write only for owner --- pica-client/dialogs/registeraccountdialog.cpp | 3 +++ pica-client/main.cpp | 2 ++ 2 files changed, 5 insertions(+) diff --git a/pica-client/dialogs/registeraccountdialog.cpp b/pica-client/dialogs/registeraccountdialog.cpp index 090cfe3..bfa4db4 100644 --- a/pica-client/dialogs/registeraccountdialog.cpp +++ b/pica-client/dialogs/registeraccountdialog.cpp @@ -2,6 +2,7 @@ #include "../globals.h" #include #include +#include #include @@ -172,6 +173,8 @@ void RegisterAccountDialog::stageSignCert(int retval, QProcess::ExitStatus) return; } + QFile::setPermissions(config_dir + QDir::separator() + "privkey.pem", QFile::ReadOwner | QFile::WriteOwner); + lbStatus->setText(tr("2) Signing certificate...")); ost.GenCertSignal(config_dir + QDir::separator() + "cert.pem", diff --git a/pica-client/main.cpp b/pica-client/main.cpp index d75e84e..f974511 100644 --- a/pica-client/main.cpp +++ b/pica-client/main.cpp @@ -417,6 +417,7 @@ static bool create_config_dir() return false; } } + QFile::setPermissions(config_dir, QFile::ReadOwner | QFile::WriteOwner); config_dbname = config_dir + QDir::separator() + QString(PICA_CLIENT_STORAGEDB); @@ -431,6 +432,7 @@ static bool create_config_dir() else update_database(); + QFile::setPermissions(config_dbname, QFile::ReadOwner | QFile::WriteOwner); /*if (!QFile::exists(config_dir + QDir::separator() + PICA_CLIENT_DHPARAMFILE)) { OpenSSLTool osslt; -- cgit v1.2.1