Tighten up permissions on post files, so they are not world writable.

1 files changed, 2 insertions, 2 deletions

diff --git a/telem.lua b/telem.lua
index f35afe2..ddf967a 100755
--- a/telem.lua
+++ b/telem.lua
@@ -238,7 +238,7 @@ function do_board()
 	raise_privs()
 	local board_dir = path.join(_BBS_ROOT, "boards", board)
 	lfs.mkdir(board_dir)
-	os.execute("chmod og+rwx " .. board_dir)
+	os.execute("chmod og+rx " .. board_dir)
 	-- Write topic file
 	local topic_file = path.join(board_dir, "topic")
 	file.write(topic_file, desc)
@@ -445,7 +445,7 @@ function do_new()
 	local thread_path = path.join(current_board.directory, thread_dir)
 	raise_privs()
 	lfs.mkdir(thread_path)
-	os.execute("chmod og+rwx " .. thread_path)
+	os.execute("chmod og+rx " .. thread_path)
 	-- Write subject file
 	file.write(path.join(thread_path, "subject"), subject)
 	os.execute("chmod og+r " .. path.join(thread_path, "subject"))