From: elijah <elijah@riseup.net>
Date: Wed, 10 Jul 2013 17:44:25 +0000 (-0700)
Subject: security fix - for a little while now, since the switch to rsync_command, permissions... 
X-Git-Url: https://gitweb.fluxo.info/?a=commitdiff_plain;h=df68d335c9c6fa8fd1638fb023b55f0993e43fe4;p=leap%2Fleap_cli.git

security fix - for a little while now, since the switch to rsync_command, permissions on rsync'ed files allowed world read. bad bad. now permissions are limited to root.
---

diff --git a/lib/leap_cli/remote/rsync_plugin.rb b/lib/leap_cli/remote/rsync_plugin.rb
index 2c89f26..495ca1d 100644
--- a/lib/leap_cli/remote/rsync_plugin.rb
+++ b/lib/leap_cli/remote/rsync_plugin.rb
@@ -14,7 +14,7 @@ module LeapCli; module Remote; module RsyncPlugin
   #   {:source => '', :dest => '', :flags => '', :includes => [], :excludes => []}
   #
   def update
-    rsync = RsyncCommand.new(:logger => logger, :flags => '-a')
+    rsync = RsyncCommand.new(:logger => logger, :flags => '-rltp --chmod=u+rX,go-rwx')
     rsync.asynchronously(find_servers) do |server|
       options = yield server
       next unless options