Ensure the auth cache file is not world readable.

This commit is contained in:
Nelson Minar 2016-02-18 16:18:02 +00:00 committed by Rapptz
parent ef57873f80
commit d4fa60e1cf

View File

@ -198,7 +198,7 @@ class Client:
try:
cache_file = self._get_cache_filename(email)
os.makedirs(os.path.dirname(cache_file), exist_ok=True)
with open(cache_file, 'w') as f:
with os.fdopen(os.open(cache_file, os.O_WRONLY | os.O_CREAT, 0o0600), 'w') as f:
log.info('updating login cache')
f.write(self.token)
except OSError: