Do not make sketches and database world-readable

There is no real point in making this world-readable, so it is probably
better to keep the data private.

Author: matthijskooijman

handlers.go

@@ -159,9 +159,9 @@ func UploadCB(status *Status) mqtt.MessageHandler {
 		}
 
 		// chmod it
-		err = os.Chmod(name, 0744)
+		err = os.Chmod(name, 0700)
 		if err != nil {
-			status.Error("/upload", errors.Wrapf(err, "chmod 744 %s", name))
+			status.Error("/upload", errors.Wrapf(err, "chmod 700 %s", name))
 			return
 		}
 
@@ -201,7 +201,7 @@ func GetSketchFolder() (string, error) {
 	folder, err := osext.ExecutableFolder()
 	folder = filepath.Join(folder, "sketches")
 	if _, err := os.Stat(folder); os.IsNotExist(err) {
-		err = os.Mkdir(folder, 0755)
+		err = os.Mkdir(folder, 0700)
 	}
 	return folder, err
 }
@@ -211,7 +211,7 @@ func GetSketchDBFolder() (string, error) {
 	folder, err := GetSketchFolder()
 	folder = filepath.Join(folder, "db")
 	if _, err := os.Stat(folder); os.IsNotExist(err) {
-		err = os.Mkdir(folder, 0755)
+		err = os.Mkdir(folder, 0700)
 	}
 	return folder, err
 }
@@ -244,7 +244,7 @@ func InsertSketchInDB(name string, id string) {
 	}
 	c = append(c, SketchBinding{ID: id, Name: name})
 	data, _ := json.Marshal(c)
-	ioutil.WriteFile(db, data, 0644)
+	ioutil.WriteFile(db, data, 0600)
 }
 
 func GetSketchIDFromDB(name string) (string, error) {

main.go

@@ -278,7 +278,7 @@ func addWatcherForManuallyAddedSketches(folderOrigin, folderDest string, status
 							break
 						}
 					}
-					os.Chmod(filename, 0755)
+					os.Chmod(filename, 0700)
 					log.Println("Moving new sketch to sketches folder")
 					fileInfo, err := os.Stat(filename)
 					if err != nil {