1
0
mirror of https://github.com/DNSCrypt/dnscrypt-proxy.git synced 2024-12-11 22:35:40 +01:00

Check for dumb file permissions on startup

There's nothing special about "-service install".

On any system, executables shouldn't be modifiable by other system
users, no matter what the executable is and how it's run.
This commit is contained in:
Frank Denis 2024-02-20 02:39:39 +01:00
parent 7462961980
commit 093936f7ab

View File

@ -66,6 +66,10 @@ func main() {
os.Exit(0) os.Exit(0)
} }
if fullexecpath, err := os.Executable(); err == nil {
WarnIfMaybeWritableByOtherUsers(fullexecpath)
}
app := &App{ app := &App{
flags: &flags, flags: &flags,
} }
@ -93,9 +97,6 @@ func main() {
dlog.Fatal(err) dlog.Fatal(err)
} }
if *svcFlag == "install" { if *svcFlag == "install" {
if fullexecpath, err := os.Executable(); err == nil {
WarnIfMaybeWritableByOtherUsers(fullexecpath)
}
dlog.Notice("Installed as a service. Use `-service start` to start") dlog.Notice("Installed as a service. Use `-service start` to start")
} else if *svcFlag == "uninstall" { } else if *svcFlag == "uninstall" {
dlog.Notice("Service uninstalled") dlog.Notice("Service uninstalled")