mirror of
				https://gitee.com/gitea/gitea
				synced 2025-11-04 08:30:25 +08:00 
			
		
		
		
	Make app.ini more restrictive on new installations (#16266)
Signed-off-by: Steven Kriegler <61625851+justusbunsi@users.noreply.github.com>
This commit is contained in:
		@@ -1159,6 +1159,19 @@ func CreateOrAppendToCustomConf(callback func(cfg *ini.File)) {
 | 
			
		||||
	if err := cfg.SaveTo(CustomConf); err != nil {
 | 
			
		||||
		log.Fatal("error saving to custom config: %v", err)
 | 
			
		||||
	}
 | 
			
		||||
 | 
			
		||||
	// Change permissions to be more restrictive
 | 
			
		||||
	fi, err := os.Stat(CustomConf)
 | 
			
		||||
	if err != nil {
 | 
			
		||||
		log.Error("Failed to determine current conf file permissions: %v", err)
 | 
			
		||||
		return
 | 
			
		||||
	}
 | 
			
		||||
 | 
			
		||||
	if fi.Mode().Perm() > 0o600 {
 | 
			
		||||
		if err = os.Chmod(CustomConf, 0o600); err != nil {
 | 
			
		||||
			log.Warn("Failed changing conf file permissions to -rw-------. Consider changing them manually.")
 | 
			
		||||
		}
 | 
			
		||||
	}
 | 
			
		||||
}
 | 
			
		||||
 | 
			
		||||
// NewServices initializes the services
 | 
			
		||||
 
 | 
			
		||||
		Reference in New Issue
	
	Block a user