From a96523c21879fdd97319a93b535f7ae144426cee Mon Sep 17 00:00:00 2001
From: Dany LE <xsang.le@gmail.com>
Date: Mon, 3 Oct 2022 17:47:37 +0200
Subject: [PATCH] database path shall only accessed by root

---
 http_server.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/http_server.c b/http_server.c
index f2f811f..793a5f5 100644
--- a/http_server.c
+++ b/http_server.c
@@ -126,7 +126,7 @@ static int config_handler(void *conf, const char *section, const char *name,
             free(pconfig->db_path);
         pconfig->db_path = strdup(value);
         if (stat(pconfig->db_path, &st) == -1)
-            mkdirp(pconfig->db_path, 0755);
+            mkdirp(pconfig->db_path, 0700);
     }
     else if (MATCH("SERVER", "tmpdir"))
     {