From 5d70e1928c19dc18b0479354b24649081f79c277 Mon Sep 17 00:00:00 2001
From: Sheng Yang <sheng.yang@citrix.com>
Date: Tue, 18 Jun 2013 17:34:21 -0700
Subject: [PATCH] CLOUDSTACK-2534: Modify id_rsa.cloud's permission to 600

644 is too open for ssh.
---
 scripts/vm/systemvm/injectkeys.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scripts/vm/systemvm/injectkeys.sh b/scripts/vm/systemvm/injectkeys.sh
index c17a3c61935..f33aa502033 100755
--- a/scripts/vm/systemvm/injectkeys.sh
+++ b/scripts/vm/systemvm/injectkeys.sh
@@ -65,7 +65,7 @@ copy_priv_key() {
   local newprivkey=$1
   diff -q $newprivkey $(dirname $0)/id_rsa.cloud && return 0
   $SUDO cp -fb $newprivkey $(dirname $0)/id_rsa.cloud
-  $SUDO chmod 644 $(dirname $0)/id_rsa.cloud
+  $SUDO chmod 600 $(dirname $0)/id_rsa.cloud
   return $?
 }