search

sqitchers / sqitch

Sensible database change management
https://sqitch.org
MIT License
2.78k stars 214 forks source link

`sqitch.conf` file permission mask #839

Open fluca1978 opened 6 days ago

fluca1978 commented 6 days ago

Using sqitch 1.4.1 from CPAN. I noted that sqitch.conf has default read permission for everyone:

% sqitch --version
sqitch (App::Sqitch) v1.4.1

 % ls -l sqitch.conf
-rw-rw-r-- 1 luca luca 222 nov 19 09:41 sqitch.conf

Apparently the application is working even if permissions are set for only the user, thus:

% chmod 600 sqitch.conf

Shouldn't this be default permission mask since sqitch.conf could possibly contain connection passwords?

theory commented 5 days ago

Never thought about it. It defaults to whatever the current directory's umask is.