From 8668f831620d2bff617920974f431bf4db31e398 Mon Sep 17 00:00:00 2001
From: Hristo Venev <hristo@venev.name>
Date: Fri, 17 May 2019 20:40:49 +0300
Subject: Create cache and state files in mode 0o0600.

---
 dist/systemd/wgconfd@.service | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'dist')

diff --git a/dist/systemd/wgconfd@.service b/dist/systemd/wgconfd@.service
index 85acb13..3b85809 100644
--- a/dist/systemd/wgconfd@.service
+++ b/dist/systemd/wgconfd@.service
@@ -10,8 +10,10 @@ CapabilityBoundingSet=CAP_NET_ADMIN
 Restart=on-failure
 RestartSec=0
 RuntimeDirectory=wgconfd/%i
+RuntimeDirectoryMode=0700
 RuntimeDirectoryPreserve=yes
 CacheDirectory=wgconfd/%i
+CacheDirectoryMode=0700
 ExecStart=/usr/bin/env wgconfd %i /etc/wireguard/%i.toml
 StandardError=journal
 SyslogLevelPrefix=true
-- 
cgit