feat(cli) explicitly set kong env as user read-only (Kong#2611)

qqcong · Jun 8, 2017 · 9952498 · 9952498
1 parent 4c62db0
commit 9952498
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/kong/cmd/utils/prefix_handler.lua b/kong/cmd/utils/prefix_handler.lua
@@ -315,6 +315,12 @@ local function prepare_prefix(kong_config, nginx_custom_template_path)
 
   pl_file.write(kong_config.kong_env, table.concat(buf, "\n"))
 
+  -- ... yeah this sucks. thanks fwrite.
+  local ok, _, _, err = pl_utils.executeex("chmod 640 " .. kong_config.kong_env)
+  if not ok then
+    log.warn("Unable to set kong env permissions: ", err)
+  end
+
   return true
 end