posix: directories should only be readable by the user.
Almost all the data we store is private, so we shouldn't even allow
it to be group-readable. Note that files still obey the user's umask
and if someone wants to make their download directory world-readable
we won't undo that.
BUG=11776
Review URL: http://codereview.chromium.org/113287
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@15890 0039d316-1c4b-4281-b951-d872f2087c98
CrOS-Libchrome-Original-Commit: 39a1a06a6a01617cc5f8f81db8ae23704700a73f
diff --git a/base/file_util_posix.cc b/base/file_util_posix.cc
index 06f3c1a..ae296ca 100644
--- a/base/file_util_posix.cc
+++ b/base/file_util_posix.cc
@@ -214,8 +214,7 @@
}
// Try creating the target dir, continuing on it if it exists already.
- // Rely on the user's umask to produce correct permissions.
- if (mkdir(target_path.value().c_str(), 0777) != 0) {
+ if (mkdir(target_path.value().c_str(), 0700) != 0) {
if (errno != EEXIST)
error = errno;
}
@@ -425,7 +424,7 @@
for (std::vector<FilePath>::reverse_iterator i = subpaths.rbegin();
i != subpaths.rend(); ++i) {
if (!DirectoryExists(*i)) {
- if (mkdir(i->value().c_str(), 0777) != 0)
+ if (mkdir(i->value().c_str(), 0700) != 0)
return false;
}
}