about summary refs log tree commit diff
diff options
context:
space:
mode:
authorFrederick Muriuki Muriithi2024-06-28 15:43:22 -0500
committerFrederick Muriuki Muriithi2024-06-28 15:43:22 -0500
commitdcee63c83872be527b06e3f56abd492f0fe9e428 (patch)
treef0c3d0f2b072464376219abaf836c815d18908dc
parent8673a19d4a7a01e277d7d39c4947043fbc11d631 (diff)
downloadgn-machines-dcee63c83872be527b06e3f56abd492f0fe9e428.tar.gz
Fix permissions: Only files are read-only
Directories need the execute bit set to actually be accessible to the
owner.
-rw-r--r--genenetwork/services/genenetwork.scm8
1 files changed, 5 insertions, 3 deletions
diff --git a/genenetwork/services/genenetwork.scm b/genenetwork/services/genenetwork.scm
index 0f2e1d6..7347d4c 100644
--- a/genenetwork/services/genenetwork.scm
+++ b/genenetwork/services/genenetwork.scm
@@ -162,9 +162,11 @@
           ;; Set owner-only permissions on secrets files.
           (for-each (lambda (file)
                       (chmod file #o600))
-                    (list #$gn2-secrets
-                          #$gn3-secrets
-                          #$gn-auth-secrets))))))
+                    (append (list #$gn3-secrets)
+                            (find-files #$gn2-secrets
+                                        #:directories? #f)
+                            (find-files #$gn-auth-secrets
+                                        #:directories? #f)))))))
 
 (define (configuration-file-gexp alist)
   "Return a G-expression that constructs a configuration file of