make tokenfile readable to user only

Signed-off-by: Matthias Büchse <[email protected]>
SovereignCloudStack · Nov 26, 2024 · ff8568d · ff8568d
1 parent 560fba3
commit ff8568d
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/Tests/add_subject.py b/Tests/add_subject.py
@@ -50,6 +50,7 @@ def main(argv, cwd):
     token = base64.b64encode(f"{subject}:{password}".encode('utf-8'))
     hash_ = CRYPTCTX.hash(password)
     with open(tokenfile_path, "wb") as fileobj:
+        os.fchmod(fileobj.fileno(), 0o600)
         fileobj.write(token)
     print("Creating key file using `ssh-keygen`...")
     subprocess.check_call([SSH_KEYGEN, '-t', 'ed25519', '-C', sanitized_subject, '-f', keyfile_path, '-N', '', '-q'])