It would probably be a good thing to have the module chmod the keyfile to 0600 (setting read and write permissions only to owner) after its been written. This would lock the file from being read (and written to) by anyone other than the user which the webserver is being run as.

Windows might not support this, but it should work well on all UNIX-like systems.

CommentFileSizeAuthor
#1 chmod.patch605 byteseasyfit

Comments

easyfit’s picture

easyfit commented
Assigned: Unassigned » easyfit
Status: Active » Needs review
StatusFileSize
new chmod.patch605 bytes
zzolo’s picture

zzolo commented
Status: Needs review » Fixed

Committed: http://drupal.org/cvs?commit=292572

Note that I used the drupal string functions instead of the PHP ones.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.