* Security: trace file is now only readable by owner, since it contains

  plain text passwords.

diff --git a/citadel/ChangeLog b/citadel/ChangeLog
index 8457ec2f76fe4491d22224ccceaf53b02d75a007..5958d7d5ad1e7811ad5be218ad553f439e8eef26 100644 (file)
--- a/citadel/ChangeLog
+++ b/citadel/ChangeLog
@@ -1,4 +1,8 @@
  $Log$
+ Revision 590.7  2001/12/14 08:29:30  error
+ * Security: trace file is now only readable by owner, since it contains
+   plain text passwords.
+
  Revision 590.6  2001/12/14 07:04:24  ajc
  * Now you can send mail to yourself.  Hi from Stu.
 
@@ -2960,4 +2964,3 @@ Sat Jul 11 00:20:48 EDT 1998 Nathan Bryant <bryant@cs.usm.maine.edu>
 
 Fri Jul 10 1998 Art Cancro <ajc@uncensored.citadel.org>
        * Initial CVS import 
-

diff --git a/citadel/server_main.c b/citadel/server_main.c
index 9cf80d5f59ad71240be3f2de7ede3b5eb5c0f732..8cd53e9b7f075a256d7ed0937f4900e3670735b3 100644 (file)
--- a/citadel/server_main.c
+++ b/citadel/server_main.c
@@ -87,6 +87,7 @@ int main(int argc, char **argv)
                        freopen(tracefile, "r", stdin);
                        freopen(tracefile, "w", stdout);
                        freopen(tracefile, "w", stderr);
+                       chmod(tracefile, 0600);
                }
 
                /* run in the background if -d was specified */