]> git.proxmox.com Git - mirror_ovs.git/commit
ovsdb: Remove read permission of *.db from others.
authorYi-Hung Wei <yihung.wei@gmail.com>
Wed, 23 Sep 2020 20:48:15 +0000 (13:48 -0700)
committerIlya Maximets <i.maximets@ovn.org>
Tue, 10 Nov 2020 00:26:41 +0000 (01:26 +0100)
commit1090a949ac920b4e7ee901cee36008408a1c2386
tree4321c2e2da082166c7ecda6aeea73de66491af2e
parent80e3becdc1eea9b92253a391c0071e6218dda7d8
ovsdb: Remove read permission of *.db from others.

Currently, when ovsdb *.db is created by ovsdb-tool it grants read
permission to others.  This may incur security concerns, for example,
IPsec Pre-shared keys are stored in ovs-vsitchd.conf.db.
This patch addresses the concerns by removing permission for others.

Reported-by: Antonin Bas <abas@vmware.com>
Acked-by: Mark Gray <mark.d.gray@redhat.com>
Signed-off-by: Yi-Hung Wei <yihung.wei@gmail.com>
Signed-off-by: Ilya Maximets <i.maximets@ovn.org>
ovsdb/log.c