From b90cfd1fde4e1c00d03e44976753d0044b273bda Mon Sep 17 00:00:00 2001 From: tv Date: Tue, 27 Oct 2026 00:58:45 +0100 Subject: introduce node keys --- src/swarm/auth.rs | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) (limited to 'src/swarm/auth.rs') diff --git a/src/swarm/auth.rs b/src/swarm/auth.rs index 3bfbd4d..088f615 100644 --- a/src/swarm/auth.rs +++ b/src/swarm/auth.rs @@ -40,9 +40,9 @@ struct Rejections { suppressed: u64, } -/// The key is a secret: a file others may read is worth a warning (not an error: a -/// group may be deliberate, e.g. shared with a deployment tool). -fn warn_if_readable_by_others(path: &Path) { +/// A key is a secret: a file others may read is worth a warning (not an error: a +/// group may be deliberate, e.g. shared with a deployment tool). `what`: which key. +pub(crate) fn warn_if_readable_by_others(path: &Path, what: &str) { #[cfg(unix)] { use std::os::unix::fs::PermissionsExt; @@ -52,13 +52,13 @@ fn warn_if_readable_by_others(path: &Path) { tracing::warn!( path = %path.display(), mode = format!("{:o}", mode & 0o777), - "The swarm key file is readable by others than its owner; chmod 600 it" + "The {what} file is readable by others than its owner; chmod 600 it" ); } } } #[cfg(not(unix))] - let _ = path; + let _ = (path, what); } /// At most one rejection log line per this interval. @@ -70,7 +70,7 @@ impl SwarmKey { pub(crate) fn from_file(path: &Path) -> Result { let key = std::fs::read(path) .with_context(|| format!("Reading the swarm key from {}", path.display()))?; - warn_if_readable_by_others(path); + warn_if_readable_by_others(path, "swarm key"); if key.len() < 16 { bail!( "The swarm key in {} has {} bytes; use at least 16 (32 random bytes recommended)", -- cgit v1.3.1