From fc5179027bcbc3c94e78fe9d89abbdfc25a757ab Mon Sep 17 00:00:00 2001
From: Jan-Piet Mens <jpmens@gmail.com>
Date: Thu, 10 Sep 2015 14:10:00 +0200
Subject: [PATCH] lower perms on env_open

---
 gcache.c | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/gcache.c b/gcache.c
index a8ad20c..d6eae5a 100644
--- a/gcache.c
+++ b/gcache.c
@@ -35,7 +35,7 @@ struct gcache *gcache_open(char *path, char *dbname, int rdonly)
 {
 	MDB_txn *txn = NULL;
 	int rc;
-	unsigned int flags = 0, dbiflags = 0;
+	unsigned int flags = 0, dbiflags = 0, perms = 0644;
 	struct gcache *gc;
 
 	if (!is_directory(path)) {
@@ -50,6 +50,7 @@ struct gcache *gcache_open(char *path, char *dbname, int rdonly)
 
 	if (rdonly) {
 		flags |= MDB_RDONLY;
+		perms = 0444;
 	} else {
 		dbiflags = MDB_CREATE;
 	}
@@ -70,7 +71,7 @@ struct gcache *gcache_open(char *path, char *dbname, int rdonly)
 		return (NULL);
 	}
 
-	rc = mdb_env_open(gc->env, path, flags, 0664);
+	rc = mdb_env_open(gc->env, path, flags, perms);
 	if (rc != 0) {
 		fprintf(stderr, "mdb_env_open: %s\n", mdb_strerror(rc));
 		free(gc);