make config.json fully private

Treferwynd / transmission-remote-gtk

Automatically exported from code.google.com/p/transmission-remote-gtk

GNU General Public License v2.0

0 stars 0 forks source link

make config.json fully private #101

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago

Since config.json can contain cleartext username&password, it is best if this 
file were kept strictly private to the owner.  Please explicitly change the 
permissions on this file to (-rw------), at least on Unixen, ie:

g_chmod("config.json",0600);

Original issue reported on code.google.com by reardo...@gmail.com on 14 Sep 2011 at 2:35

GoogleCodeExporter commented 9 years ago

Done, although the parent directory was created with 700 so it wouldn't have 
been possible to read anyway.

Original comment by a...@eth0.org.uk on 14 Sep 2011 at 2:52

Changed state: Fixed

GoogleCodeExporter commented 9 years ago

Hmm, I just tried this on a clean, fresh install of Ubuntu Natty (Gnome/Unity), 
and it was created "-rw-r--r--"

Original comment by reardo...@gmail.com on 2 Oct 2011 at 7:26