Make spool directory use restricted permissions.

michaelrsweet · Nov 7, 2023 · 8938573 · 8938573
1 parent ea7515d
commit 8938573
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pappl/mainloop-subcommands.c b/pappl/mainloop-subcommands.c
@@ -1724,7 +1724,7 @@ default_system_cb(
       snprintf(spoolname, sizeof(spoolname), PAPPL_STATEDIR "/spool/%s", base_name);
 
       // Make sure base directory exists
-      if (mkdir(PAPPL_STATEDIR "/spool", 0777) && errno != EEXIST)
+      if (mkdir(PAPPL_STATEDIR "/spool", 0700) && errno != EEXIST)
       {
 	// Can't use local state directory, so use the last resort...
 	spoolname[0] = '\0';