Set backup file permissions to 600

diff --git a/backup-config/CHANGELOG b/backup-config/CHANGELOG
index f20c216..30fade6 100644 (file)
--- a/backup-config/CHANGELOG
+++ b/backup-config/CHANGELOG
@@ -15,3 +15,4 @@ When a directory is entered as an additional path to backup, it will be expanded
 When backing up or restoring from an FTP or SSH server, an optional port number can be entered if the remote server is using a non-standard port.
 ---- Changes since 1.440 ----
 Converted commands in the module's API file to POD format, and added more details about each function.
+Backup files are now given 600 permissions, to prevent reading by non-root users.

diff --git a/backup-config/backup-config-lib.pl b/backup-config/backup-config-lib.pl
index 5b1d256..c914c39 100644 (file)
--- a/backup-config/backup-config-lib.pl
+++ b/backup-config/backup-config-lib.pl
@@ -385,6 +385,7 @@ if ($?) {
 local @st = stat($file);
 ${$_[2]} = $st[7] if ($_[2]);
 @{$_[3]} = &unique(@files) if ($_[3]);
+&set_ownership_permissions(undef, undef, 0600, $file);
 
 if (!$_[5]) {
        # Call all module post functions