From f57b61de71b2eaa31d889f7147968f8db4892e47 Mon Sep 17 00:00:00 2001
From: Davanum Srinivas <dims@linux.vnet.ibm.com>
Date: Mon, 28 Jan 2013 20:23:53 -0500
Subject: Fix authorized_keys file permissions

Explicitly set the file permissions to be 0600

Fixes LP# 1107908

Change-Id: Ife44deff41959180d31e7e88c29233e9b8cb0af2
---
 nova/virt/disk/api.py | 1 +
 1 file changed, 1 insertion(+)

(limited to 'nova/virt')

diff --git a/nova/virt/disk/api.py b/nova/virt/disk/api.py
index 3d7d0f516..304781a64 100644
--- a/nova/virt/disk/api.py
+++ b/nova/virt/disk/api.py
@@ -443,6 +443,7 @@ def _inject_key_into_fs(key, fs):
     ])
 
     _inject_file_into_fs(fs, keyfile, key_data, append=True)
+    fs.set_permissions(keyfile, 0600)
 
     _setup_selinux_for_keys(fs, sshdir)
 
-- 
cgit