Commit 9373abf7f77c37094f9ba6ca68287d8a06ebafa0 | zig

author	Jacob Young <jacobly@ziglang.org> 2024-11-07 20:25:04-05:00
committer	Jacob Young <jacobly@ziglang.org> 2024-11-07 20:56:33-05:00
log	9373abf7f77c37094f9ba6ca68287d8a06ebafa0
tree	c9fb5a5324d741042de3c581d8719bb2b27c889a
parent	75adba7cb9501f33453275c187bcd7f4b11eaa9d

std.http.Client: change ssl key log creation permission bits

This is the same mode used by openssh for private keys.  This does not
change the mode of an existing file, so users who need something
different can pre-create the file with their designed permissions or
change them after the fact, and running another process that writes to
the key log will not change it back.

1 files changed, 7 insertions(+), 1 deletions(-)

lib
- std
  - http
    Client.zig

lib/std/http/Client.zig+7-1

 @@ -1361,7 +1361,13 @@ pub fn connectTcp(client: *Client, host: []const u8, port: u16, protocol: Connec
                 error.OutOfMemory => return error.OutOfMemory,
             };
             defer client.allocator.free(ssl_key_log_path);
-            break :ssl_key_log_file std.fs.cwd().createFile(ssl_key_log_path, .{ .truncate = false }) catch null;
+            break :ssl_key_log_file std.fs.cwd().createFile(ssl_key_log_path, .{
+                .truncate = false,
+                .mode = switch (builtin.os.tag) {
+                    .windows, .wasi => 0,
+                    else => 0o600,
+                },
+            }) catch null;
         } else null;
         errdefer if (ssl_key_log_file) |key_log_file| key_log_file.close();