Changed the umask to 077 so that the keys file is not readable/writable by other users.

1 files changed, 1 insertions, 2 deletions

diff --git a/other/bootstrap_daemon/src/tox-bootstrapd.c b/other/bootstrap_daemon/src/tox-bootstrapd.c
index 86bf1ddb..686b968f 100644
--- a/other/bootstrap_daemon/src/tox-bootstrapd.c
+++ b/other/bootstrap_daemon/src/tox-bootstrapd.c
@@ -157,8 +157,6 @@ void daemonize(LOG_BACKEND log_backend, char *pid_file_path)
         exit(1);
     }
 
-    // Change the file mode mask
-    umask(0);
 
     // Change the current working directory
     if ((chdir("/")) < 0) {
@@ -176,6 +174,7 @@ void daemonize(LOG_BACKEND log_backend, char *pid_file_path)
 
 int main(int argc, char *argv[])
 {
+    umask(077);
     char *cfg_file_path;
     LOG_BACKEND log_backend;
     bool run_in_foreground;