NetVM: /etc/netvm 711 so operators can stat (not read) identities

2026-10-03 01:06:00 -04:00
parent 9f76e30ff9
commit 1349e8bb7b
2 changed files with 3 additions and 1 deletions
@@ -8,6 +8,8 @@ netvm_names "${1:?usage: netvm-node-up.sh <node>}"
 CONF="/etc/netvm/${NODE}.conf"
 [ -f "$CONF" ] || { echo "missing $CONF (human: netvm-new-identity.sh $NODE)"; exit 1; }
 chmod 600 "$CONF"
+# let the operator user stat (not read) identities: 711 dir, 600 files
+chmod 711 /etc/netvm 2>/dev/null || true
 nsexec() { ip netns exec "$NETNS" "$@"; }

 ip netns add "$NETNS" 2>/dev/null || true