From 43c9ded791ce5b480504ce3528ee34578168f90e Mon Sep 17 00:00:00 2001 From: Diego Nicola Barbato Date: Tue, 7 Apr 2020 13:58:28 +0200 Subject: [PATCH 1/2] service: Create log files as non-world-readable. * modules/shepherd/service.scm (exec-command): Create log-file with file permissions #o640. --- modules/shepherd/service.scm | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/shepherd/service.scm b/modules/shepherd/service.scm index fc82cc4..9a4a5d9 100644 --- a/modules/shepherd/service.scm +++ b/modules/shepherd/service.scm @@ -808,7 +808,7 @@ false." ;; Redirect stout and stderr to use LOG-FILE. (catch-system-error (close-fdes 1)) (catch-system-error (close-fdes 2)) - (dup2 (open-fdes log-file (logior O_CREAT O_WRONLY O_APPEND)) 1) + (dup2 (open-fdes log-file (logior O_CREAT O_WRONLY O_APPEND) #o640) 1) (dup2 1 2)) (lambda (key . args) (format (current-error-port) -- 2.26.0