From 92efb1db578858441978ebd72a688b2404948746 Mon Sep 17 00:00:00 2001 From: Solderpunk Date: Sat, 18 May 2019 17:44:37 +0000 Subject: Tighten up permissions on post files, so they are not world writable. --- telem.lua | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/telem.lua b/telem.lua index f35afe2..ddf967a 100755 --- a/telem.lua +++ b/telem.lua @@ -238,7 +238,7 @@ function do_board() raise_privs() local board_dir = path.join(_BBS_ROOT, "boards", board) lfs.mkdir(board_dir) - os.execute("chmod og+rwx " .. board_dir) + os.execute("chmod og+rx " .. board_dir) -- Write topic file local topic_file = path.join(board_dir, "topic") file.write(topic_file, desc) @@ -445,7 +445,7 @@ function do_new() local thread_path = path.join(current_board.directory, thread_dir) raise_privs() lfs.mkdir(thread_path) - os.execute("chmod og+rwx " .. thread_path) + os.execute("chmod og+rx " .. thread_path) -- Write subject file file.write(path.join(thread_path, "subject"), subject) os.execute("chmod og+r " .. path.join(thread_path, "subject")) -- cgit v1.2.3