From c76fd5b9b0a3bba6c8ffa847e5fc818661e800d6 Mon Sep 17 00:00:00 2001 From: tv Date: Sat, 31 Oct 2026 05:28:26 +0100 Subject: move warn_if_readable_by_others to files module --- src/swarm/auth.rs | 23 +---------------------- 1 file changed, 1 insertion(+), 22 deletions(-) (limited to 'src/swarm/auth.rs') diff --git a/src/swarm/auth.rs b/src/swarm/auth.rs index 50e2fae..534a64d 100644 --- a/src/swarm/auth.rs +++ b/src/swarm/auth.rs @@ -40,27 +40,6 @@ struct Rejections { suppressed: u64, } -/// A key is a secret: a file others may read is worth a warning (not an error: a -/// group may be deliberate, e.g. shared with a deployment tool). `what`: which key. -pub(crate) fn warn_if_readable_by_others(path: &Path, what: &str) { - #[cfg(unix)] - { - use std::os::unix::fs::PermissionsExt; - if let Ok(metadata) = std::fs::metadata(path) { - let mode = metadata.permissions().mode(); - if mode & 0o077 != 0 { - tracing::warn!( - path = %path.display(), - mode = format!("{:o}", mode & 0o777), - "The {what} file is readable by others than its owner; chmod 600 it" - ); - } - } - } - #[cfg(not(unix))] - let _ = (path, what); -} - /// At most one rejection log line per this interval. const REJECTION_LOG_INTERVAL: Duration = Duration::from_secs(10); @@ -70,7 +49,7 @@ impl SwarmKey { pub(crate) fn from_file(path: &Path) -> Result { let key = std::fs::read(path) .with_context(|| format!("Reading the swarm key from {}", path.display()))?; - warn_if_readable_by_others(path, "swarm key"); + crate::files::warn_if_readable_by_others(path, "swarm key"); if key.len() < 16 { bail!( "The swarm key in {} has {} bytes; use at least 16 (32 random bytes recommended)", -- cgit v1.3.1