Ensuring we make 0600 for new keys

adamhjk · adamhjk · commit ec08c988ece3 · 2010-02-27T16:46:54.000-08:00
diff --git a/chef/lib/chef/rest.rb b/chef/lib/chef/rest.rb
@@ -79,7 +79,7 @@ def register(name=Chef::Config[:node_name], destination=Chef::Config[:client_key
 Chef::Log.debug("Registration response: #{response.inspect}")
 raise Chef::Exceptions::CannotWritePrivateKey, "The response from the server did not include a private key!" unless response.has_key?("private_key")
 # Write out the private key
- file = File.open(destination, "w")
+ file = File.open(destination, File::WRONLY|File::EXCL|File::CREAT, 0600) 
 file.print(response["private_key"])
 file.close
 throw :done

-Original file line number
+Diff line change
 Chef::Log.debug("Registration response: #{response.inspect}")
 raiseChef::Exceptions::CannotWritePrivateKey,"The response from the server did not include a private key!"unlessresponse.has_key?("private_key")
 # Write out the private key
 -file=File.open(destination,"w")
 +file=File.open(destination,File::WRONLY|File::EXCL|File::CREAT,0600)
 file.print(response["private_key"])
 file.close
 throw:done