• Matthias Gerstner's avatar
    state_file_dir: choose safe default mode, make mode configurable · 9a98bd6f
    Matthias Gerstner authored
    `os.makedirs()` uses default mode 0777 in Python2. Therefore the
    protection level of the state_file_dir depends on the inherited umask. A
    default mode of 0750 is a good conservative default for this. To allow
    admins and system integrators to tune this setting it is configurable
    via the new config file setting 'state_file_dir_mode'.
    
    This also requires to adjust test_bootstrap_tls to cover the new config
    option.
    9a98bd6f
__init__.py 23 KB