reduce permissions on sys.config

Question

reduce permissions on sys.config

kf8a opened this issue 8 years ago · comments

Since sys.config can contain sensitive info (passwords, etc) it might be good if the permissions for the file were 600 instead of 644. I could add a chmod to generate_sys_config in mix/task/release.ex, but maybe it should be handled by relx instead. Thoughts?

Paul Schoenfelder · Answer 1 · Tue Jul 26 2016 23:59:30 GMT+0800 (China Standard Time)

We always pass our own sys.config to relx, so adding the call to File.chmod in generate_sys_config is the way to go on this one.

Sven Böhm · Answer 2 · Wed Jul 27 2016 03:09:28 GMT+0800 (China Standard Time)

Ok, thanks. I'll get PR ready.