ExternalVendorCode/ZeroTierOne
1
0
Fork 0
mirror of https://github.com/zerotier/ZeroTierOne.git synced 2025-06-01 23:10:52 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Lock down individual files in networks.d instead of directory since directory ACLs are more complex on Windows.

Browse Source
This commit is contained in:
Adam Ierymenko 2014-01-26 10:32:12 -08:00
parent 22efa1ab53
commit 9d67a02b5f
2 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
node/Network.cpp
View File

@ -116,6 +116,8 @@ void Network::setConfiguration(const Dictionary &conf,bool saveToDisk)
std::string confPath(_r->homePath + ZT_PATH_SEPARATOR_S + "networks.d" + ZT_PATH_SEPARATOR_S + idString() + ".conf"); std::string confPath(_r->homePath + ZT_PATH_SEPARATOR_S + "networks.d" + ZT_PATH_SEPARATOR_S + idString() + ".conf");
if (!Utils::writeFile(confPath.c_str(),conf.toString())) { if (!Utils::writeFile(confPath.c_str(),conf.toString())) {
LOG("error: unable to write network configuration file at: %s",confPath.c_str()); LOG("error: unable to write network configuration file at: %s",confPath.c_str());
} else {
Utils::lockDownFile(confPath.c_str(),false);
} }
} }
} else { } else {
@ -368,6 +370,7 @@ void Network::_dumpMulticastCerts()
} }
fclose(mcdb); fclose(mcdb);
Utils::lockDownFile(mcdbPath.c_str(),false);
} }
} // namespace ZeroTier } // namespace ZeroTier

3
node/Node.cpp
View File

@ -419,7 +419,7 @@ Node::ReasonForTermination Node::run()
} }
Utils::lockDownFile(identitySecretPath.c_str(),false); Utils::lockDownFile(identitySecretPath.c_str(),false);
// Make sure networks.d exists and is secure // Make sure networks.d exists
{ {
std::string networksDotD(_r->homePath + ZT_PATH_SEPARATOR_S + "networks.d"); std::string networksDotD(_r->homePath + ZT_PATH_SEPARATOR_S + "networks.d");
#ifdef __WINDOWS__ #ifdef __WINDOWS__
@ -427,7 +427,6 @@ Node::ReasonForTermination Node::run()
#else #else
mkdir(networksDotD.c_str(),0700); mkdir(networksDotD.c_str(),0700);
#endif #endif
Utils::lockDownFile(networksDotD.c_str(),true);
} }
// Load or generate config authentication secret // Load or generate config authentication secret