Bug 1926997: New profile directories should not be world readable. r=profiles-reviewers,jhirsch

Differential Revision: https://phabricator.services.mozilla.com/D241597
2025-03-17 15:08:58 +00:00
parent ae74acd170
commit 7d1cb65882
2 changed files with 22 additions and 2 deletions
--- a/browser/components/profiles/SelectableProfileService.sys.mjs
+++ b/browser/components/profiles/SelectableProfileService.sys.mjs
@@ -976,13 +976,19 @@ class SelectableProfileServiceClass extends EventEmitter {
        PathUtils.join(
          SelectableProfileServiceClass.getDirectory("DefProfRt").path,
          profileDir
-        )
+        ),
+        {
+          permissions: 0o700,
+        }
      ),
      IOUtils.makeDirectory(
        PathUtils.join(
          SelectableProfileServiceClass.getDirectory("DefProfLRt").path,
          profileDir
-        )
+        ),
+        {
+          permissions: 0o700,
+        }
      ),
    ]);