mon: use mode 0600 throughout

Fixes: #2526
Signed-off-by: Sage Weil <sage@inktank.com>

diff --git a/src/mon/MonitorStore.cc b/src/mon/MonitorStore.cc
index 5c6edefb9b9a7083eeac399645c5493aef338499..ea4ac17cee85d238510bee55ac07f799fda3646a 100644 (file)
--- a/src/mon/MonitorStore.cc
+++ b/src/mon/MonitorStore.cc
@@ -174,7 +174,7 @@ void MonitorStore::put_int(version_t val, const char *a, const char *b)
   char tfn[1024];
   snprintf(tfn, sizeof(tfn), "%s.new", fn);
 
-  int fd = TEMP_FAILURE_RETRY(::open(tfn, O_WRONLY|O_CREAT, 0644));
+  int fd = TEMP_FAILURE_RETRY(::open(tfn, O_WRONLY|O_CREAT, 0600));
   if (fd < 0) {
     int err = errno;
     derr << "MonitorStore::put_int: failed to open '" << tfn << "': "
@@ -308,7 +308,7 @@ int MonitorStore::write_bl_ss_impl(bufferlist& bl, const char *a, const char *b,
   int err = 0;
   int fd;
   if (append) {
-    fd = ::open(fn, O_WRONLY|O_CREAT|O_APPEND, 0644);
+    fd = ::open(fn, O_WRONLY|O_CREAT|O_APPEND, 0600);
     if (fd < 0) {
       err = -errno;
       derr << "failed to open " << fn << "for append: "
@@ -317,7 +317,7 @@ int MonitorStore::write_bl_ss_impl(bufferlist& bl, const char *a, const char *b,
     }
   } else {
     snprintf(tfn, sizeof(tfn), "%s.new", fn);
-    fd = ::open(tfn, O_WRONLY|O_CREAT|O_TRUNC, 0644);
+    fd = ::open(tfn, O_WRONLY|O_CREAT|O_TRUNC, 0600);
     if (fd < 0) {
       err = -errno;
       derr << "failed to open " << tfn << ": " << cpp_strerror(err) << dendl;
@@ -379,7 +379,7 @@ int MonitorStore::put_bl_sn_map(const char *a,
     snprintf(fn, sizeof(fn), "%s/%llu", dfn, (long long unsigned)p->first);
     snprintf(tfn, sizeof(tfn), "%s.new", fn);
 
-    int fd = ::open(tfn, O_WRONLY|O_CREAT, 0644);
+    int fd = ::open(tfn, O_WRONLY|O_CREAT, 0600);
     if (fd < 0) {
       int err = -errno;
       derr << "failed to open " << tfn << ": " << cpp_strerror(err) << dendl;