nametransform: Create *.name files with 0400 permission.

Similar to gocryptfs.iv files they are never modified.
slackner · Jan 9, 2019 · aae45b4 · aae45b4
1 parent b22cc03
commit aae45b4
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/internal/nametransform/longnames.go b/internal/nametransform/longnames.go
@@ -129,7 +129,7 @@ func (n *NameTransform) WriteLongNameAt(dirfd int, hashName string, plainName st
 
 	// Write the encrypted name into hashName.name
 	fdRaw, err := syscallcompat.Openat(dirfd, hashName+LongNameSuffix,
-		syscall.O_WRONLY|syscall.O_CREAT|syscall.O_EXCL, 0600)
+		syscall.O_WRONLY|syscall.O_CREAT|syscall.O_EXCL, 0400)
 	if err != nil {
 		// Don't warn if the file already exists - this is allowed for renames
 		// and should be handled by the caller.