security(core): rsa keys no more world readable (#165)

centreon · Nov 23, 2021 · cb6e2ad · cb6e2ad
1 parent 4b18112
commit cb6e2ad
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/gorgone/class/core.pm b/gorgone/class/core.pm
@@ -110,6 +110,15 @@ sub init_server_keys {
         $self->{logger}->writeLogInfo("[core] Public key file '$self->{config}->{configuration}->{gorgone}->{gorgonecore}->{pubkey}' written");
     }
 
+    my $rv = chmod(0600, $self->{config}->{configuration}->{gorgone}->{gorgonecore}->{privkey});
+    if ($rv == 0) {
+        $self->{logger}->writeLogInfo("[core] chmod private key file '$self->{config}->{configuration}->{gorgone}->{gorgonecore}->{privkey}': $!");
+    }
+    $rv = chmod(0640, $self->{config}->{configuration}->{gorgone}->{gorgonecore}->{pubkey});
+    if ($rv == 0) {
+        $self->{logger}->writeLogInfo("[core] chmod public key file '$self->{config}->{configuration}->{gorgone}->{gorgonecore}->{pubkey}': $!");
+    }
+
     ($code, $self->{server_privkey}) = gorgone::standard::library::loadprivkey(
         logger => $self->{logger},
         privkey => $self->{config}->{configuration}->{gorgone}->{gorgonecore}->{privkey},