Set umask to 077 to avoid public srvtabs

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14213 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/kadmin/ktutil/ChangeLog b/src/kadmin/ktutil/ChangeLog
index e7bc046c3fc5ea535e6aee00f671d4f2b2df9cc4..e3b63c3ff9ef0f4ae65711d9ee360f2cedac38af 100644 (file)
--- a/src/kadmin/ktutil/ChangeLog
+++ b/src/kadmin/ktutil/ChangeLog
@@ -1,3 +1,9 @@
+2002-03-02  Sam Hartman  <hartmans@mit.edu>
+
+       * ktutil_funcs.c (ktutil_write_srvtab): Set umask to 077 to avoid
+       public srvtabs.
+       
+
 2001-10-09  Ken Raeburn  <raeburn@mit.edu>
 
        * ktutil.h: Make prototypes unconditional.

diff --git a/src/kadmin/ktutil/ktutil_funcs.c b/src/kadmin/ktutil/ktutil_funcs.c
index 94d5b5e7d05a3217b0884490ad6c0d1539bcf99b..3d8f0d695a2447910d9aa43b34996078a970530c 100644 (file)
--- a/src/kadmin/ktutil/ktutil_funcs.c
+++ b/src/kadmin/ktutil/ktutil_funcs.c
@@ -508,6 +508,9 @@ krb5_error_code ktutil_write_srvtab(context, list, name)
            /* Check if lp->entry is newer kvno; if so, update */
            lp1->entry = lp->entry;
     }
+    umask(0077); /*Changing umask for all of ktutil is OK
+                 * We don't ever write out anything that should use
+                 * default umask.*/
     fp = fopen(name, "w");
     if (!fp) {
        retval = EIO;