security(core): rsa keys no more world readable (#165)

centreon · Dec 10, 2021 · b0ac91b · b0ac91b
1 parent a3ed6a0
commit b0ac91b
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/gorgone/class/core.pm b/gorgone/class/core.pm
@@ -108,6 +108,15 @@ sub init_server_keys {
         $self->{logger}->writeLogInfo("[core] Public key file '$self->{config}->{configuration}->{gorgone}->{gorgonecore}->{pubkey}' written");
     }
 
+    my $rv = chmod(0600, $self->{config}->{configuration}->{gorgone}->{gorgonecore}->{privkey});
+    if ($rv == 0) {
+        $self->{logger}->writeLogInfo("[core] chmod private key file '$self->{config}->{configuration}->{gorgone}->{gorgonecore}->{privkey}': $!");
+    }
+    $rv = chmod(0640, $self->{config}->{configuration}->{gorgone}->{gorgonecore}->{pubkey});
+    if ($rv == 0) {
+        $self->{logger}->writeLogInfo("[core] chmod public key file '$self->{config}->{configuration}->{gorgone}->{gorgonecore}->{pubkey}': $!");
+    }
+
     ($code, $self->{server_privkey}) = gorgone::standard::library::loadprivkey(
         logger => $self->{logger},
         privkey => $self->{config}->{configuration}->{gorgone}->{gorgonecore}->{privkey},