spesmilo / electrum / 6360100505387008

65%

master: 65%

Build Type

Pull #10547

CirrusCI

Committed by SomberNight

Commit Message

set restrictive unix umask application-wide by default

- I noticed we were creating the RPC server unix domain socket with 0o775.
  Instead of hunting down each individual line we create files/dirs, we should
  just set a restrictive umask by default. We can still use chmod to relax this
  for individual files. -- but we should try to be secure by default
- note: bitcoin core does the same
    https://github.com/bitcoin/bitcoin/blame/2fe76ed83/src/common/system.cpp#L92
- the umask is set in run_electrum as opposed to __init__.py so that we don't side-effect use-cases where electrum is imported as a library

Pull Request Pull Request #10547: set restrictive unix umask application-wide by default

Coverage Stats

1 of 3 new or added lines in 1 file covered. (33.33%)

434 existing lines in 4 files now uncovered.

24413 of 37655 relevant lines covered (64.83%)

0.65 hits per line