Add chmod to write

pritunl · Mar 25, 2018 · be199ce · be199ce
1 parent 1ec9d88
commit be199ce
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 0 deletions.
diff --git a/ssh_client.py b/ssh_client.py
@@ -197,6 +197,7 @@
     if known_hosts_modified:
         print 'KNOWN_HOSTS: ' + known_hosts_path
         with open(known_hosts_path_full, 'w') as known_file:
+            os.chmod(known_hosts_path_full, 0600)
             known_file.write(known_hosts_data)
 
     ssh_config_modified = False
@@ -230,6 +231,7 @@
     if ssh_config_modified:
         print 'SSH_CONFIG: ' + ssh_config_path
         with open(ssh_config_path_full, 'w') as config_file:
+            os.chmod(ssh_config_path_full, 0600)
             config_file.write(ssh_config_data)
 
     print 'Successfully cleared strict host checking configuration'
@@ -254,6 +256,7 @@
     if known_hosts_modified:
         print 'KNOWN_HOSTS: ' + known_hosts_path
         with open(known_hosts_path_full, 'w') as known_file:
+            os.chmod(known_hosts_path_full, 0600)
             known_file.write(known_hosts_data)
 
     ssh_config_modified = False
@@ -287,6 +290,7 @@
     if ssh_config_modified:
         print 'SSH_CONFIG: ' + ssh_config_path
         with open(ssh_config_path_full, 'w') as config_file:
+            os.chmod(ssh_config_path_full, 0600)
             config_file.write(ssh_config_data)
 
     print 'Successfully cleared bastion host configuration'
@@ -310,6 +314,7 @@
     if known_hosts_modified:
         print 'KNOWN_HOSTS: ' + known_hosts_path
         with open(known_hosts_path_full, 'w') as known_file:
+            os.chmod(known_hosts_path_full, 0600)
             known_file.write(known_hosts_data)
 
     ssh_config_modified = False
@@ -336,6 +341,7 @@
     if ssh_config_modified:
         print 'SSH_CONFIG: ' + ssh_config_path
         with open(ssh_config_path_full, 'w') as config_file:
+            os.chmod(ssh_config_path_full, 0600)
             config_file.write(ssh_config_data)
 
     print 'Successfully cleared SSH configuration'
@@ -507,6 +513,7 @@
     conf_keybase_state = True
 
 with open(conf_path, 'w') as conf_file:
+    os.chmod(conf_path, 0600)
     conf_file.write(json.dumps({
         'server': conf_zero_server,
         'public_key_path': conf_pub_key_path,
@@ -830,6 +837,7 @@ def factor_challenge(factor, passcode):
 cert_hosts = cert_data.get('hosts')
 
 with open(cert_path_full, 'w') as cert_file:
+    os.chmod(cert_path_full, 0600)
     cert_file.write('\n'.join(certificates) + '\n')
 
 print 'CERTIFICATE: ' + cert_path
@@ -852,6 +860,7 @@ def factor_challenge(factor, passcode):
 if known_hosts_modified:
     print 'KNOWN_HOSTS: ' + known_hosts_path
     with open(known_hosts_path_full, 'w') as known_file:
+        os.chmod(known_hosts_path_full, 0600)
         known_file.write(known_hosts_data)
 
 ssh_config_modified = False
@@ -899,6 +908,7 @@ def factor_challenge(factor, passcode):
 if ssh_config_modified:
     print 'SSH_CONFIG: ' + ssh_config_path
     with open(ssh_config_path_full, 'w') as config_file:
+        os.chmod(ssh_config_path_full, 0600)
         config_file.write(ssh_config_data)
 
 print 'Successfully validated SSH key'
diff --git a/ssh_host_client.py b/ssh_host_client.py
@@ -83,6 +83,7 @@
 
 def write_conf():
     with open(CONF_PATH, 'w') as conf_file:
+        os.chmod(CONF_PATH, 0600)
         conf_file.write(json.dumps({
             'hostname': conf_hostname,
             'server': conf_server,
@@ -474,6 +475,7 @@ def do_GET(self):
 
 print('SSH_CERT: ' + cert_path)
 with open(cert_path, 'w') as ssh_file:
+    os.chmod(cert_path, 0644)
     ssh_file.write('\n'.join(certificates))
 
 sys.exit(0)