hydra-module.nix: More paranoid permissions on the data directory

2013-11-06 17:29:34 +01:00 · 2013-11-06 17:29:34 +01:00 · ed9d57d0a4
parent 2614fe21fb
commit ed9d57d0a4
1 changed files with 1 additions and 1 deletions
--- a/hydra-module.nix
+++ b/hydra-module.nix
@ -180,7 +180,7 @@ in
        after = [ "postgresql.service" ];
        environment = env;
        script = ''
-          mkdir -p ${baseDir}/data
+          mkdir -m 0700 -p ${baseDir}/data
          chown hydra ${baseDir}/data
          ln -sf ${hydraConf} ${baseDir}/data/hydra.conf
          ${optionalString (cfg.dbi == "dbi:Pg:dbname=hydra;user=hydra;") ''