summaryrefslogtreecommitdiffstats
path: root/src
diff options
context:
space:
mode:
Diffstat (limited to 'src')
-rw-r--r--src/kadmin/ktutil/ChangeLog6
-rw-r--r--src/kadmin/ktutil/ktutil_funcs.c3
2 files changed, 9 insertions, 0 deletions
diff --git a/src/kadmin/ktutil/ChangeLog b/src/kadmin/ktutil/ChangeLog
index e7bc046c3..e3b63c3ff 100644
--- a/src/kadmin/ktutil/ChangeLog
+++ b/src/kadmin/ktutil/ChangeLog
@@ -1,3 +1,9 @@
+2002-03-02 Sam Hartman <hartmans@mit.edu>
+
+ * ktutil_funcs.c (ktutil_write_srvtab): Set umask to 077 to avoid
+ public srvtabs.
+
+
2001-10-09 Ken Raeburn <raeburn@mit.edu>
* ktutil.h: Make prototypes unconditional.
diff --git a/src/kadmin/ktutil/ktutil_funcs.c b/src/kadmin/ktutil/ktutil_funcs.c
index 94d5b5e7d..3d8f0d695 100644
--- a/src/kadmin/ktutil/ktutil_funcs.c
+++ b/src/kadmin/ktutil/ktutil_funcs.c
@@ -508,6 +508,9 @@ krb5_error_code ktutil_write_srvtab(context, list, name)
/* Check if lp->entry is newer kvno; if so, update */
lp1->entry = lp->entry;
}
+ umask(0077); /*Changing umask for all of ktutil is OK
+ * We don't ever write out anything that should use
+ * default umask.*/
fp = fopen(name, "w");
if (!fp) {
retval = EIO;