From fa619b59d61d7aa945fa57fe18da75bdeaa57639 Mon Sep 17 00:00:00 2001
From: coderaiser <coderaiser@cloudcmd.io>
Date: Thu, 14 Jun 2018 16:09:39 +0300
Subject: [PATCH] fix(config) set file mode permissions to readable only by
 current user (#61)

---
 package.json     | 2 +-
 server/config.js | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/package.json b/package.json
index 90e9826d..8f7d8324 100644
--- a/package.json
+++ b/package.json
@@ -153,7 +153,7 @@
     "try-catch": "^2.0.0",
     "tryrequire": "^2.0.1",
     "wraptile": "^2.0.0",
-    "writejson": "^1.1.0"
+    "writejson": "^2.0.0"
   },
   "devDependencies": {
     "@babel/core": "^7.0.0-beta.49",
diff --git a/server/config.js b/server/config.js
index 889a239e..3cfd895f 100644
--- a/server/config.js
+++ b/server/config.js
@@ -86,7 +86,7 @@ function manage(key, value) {
 }
 
 function _save(callback) {
-    writejson(ConfigHome, config, callback);
+    writejson(ConfigHome, config, {mode: 0o600}, callback);
 }
 
 function listen(sock, auth) {