| commit | 498f9bdbfdfd2aee61f75fd68f9c1e51fc8c2a3e | [log] [tgz] |
|---|---|---|
| author | Mike Frysinger <[email protected]> | Mon May 19 20:26:45 2014 |
| committer | chrome-internal-fetch <[email protected]> | Wed May 21 04:18:40 2014 |
| tree | 0774088af964a6cdd5abf56580ce9ddf6f551927 | |
| parent | 1098efa4e0660d746d79f4b0e53dee6e9b0170e9 [diff] |
chromeos-setdevpasswd: fix permissions on devmode.passwd By default, this file gets created with 0644 perms which allows any non-root user to read it (and thus be able to extract & crack offline). Make sure we create the file with 0600 perms since only root is allowed to create it, and only root (via pam) needs to read it. BUG=chromium:374911 TEST=ran script and checked perms, then checked `sudo` as chronos still worked Change-Id: Ic0fcfb018f16321087178d108ac3b9c500dec357 Reviewed-on: https://chromium-review.googlesource.com/200481 Reviewed-by: Don Garrett <[email protected]> Commit-Queue: Mike Frysinger <[email protected]> Tested-by: Mike Frysinger <[email protected]>