From 47f1428e2b0f5b57e0f11c18a4e47cec4bf97e25 Mon Sep 17 00:00:00 2001
From: Guillaume Cottenceau <gc@mandriva.com>
Date: Fri, 6 Sep 2002 07:44:32 +0000
Subject: protext /etc/urpmi/proxy.cfg from world read because it potentially
 contains a clear password

---
 grpmi/curl_download/curl_download.pm | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

(limited to 'grpmi/curl_download/curl_download.pm')

diff --git a/grpmi/curl_download/curl_download.pm b/grpmi/curl_download/curl_download.pm
index 7c6ec472..7a3e07fb 100644
--- a/grpmi/curl_download/curl_download.pm
+++ b/grpmi/curl_download/curl_download.pm
@@ -24,9 +24,11 @@ sub readproxy {
 
 sub writeproxy {
     my ($proxy, $proxy_user) = @_;
-    output("/etc/urpmi/proxy.cfg",
+    my $f = '/etc/urpmi/proxy.cfg'; 
+    output($f,
 	   if_($proxy, "http_proxy=$proxy\n"),
 	   if_($proxy_user, "proxy_user=$proxy_user\n"));
+    chmod 0600, $f;
 }
 
 sub download {
-- 
cgit v1.2.1