Merge pull request #758 from progrium/621-permissions

Make ENV file readable only from dokku user. Closes #621
2014-11-16 00:27:07 -05:00
parent f03c0c5440 913af9b641
commit d0ceee5b3b
1 changed files with 1 additions and 0 deletions
--- a/plugins/config/commands
+++ b/plugins/config/commands
@@ -66,6 +66,7 @@ config_write() {
  echo -e "$ENV_TEMP" | sed '/^$/d' | sort > $ENV_FILE_TEMP
  if ! cmp -s $ENV_FILE $ENV_FILE_TEMP; then
    cp -f $ENV_FILE_TEMP $ENV_FILE
+    chmod 600 $ENV_FILE
    config_restart_app $APP
  fi
  rm -f $ENV_FILE_TEMP