Ensure tempfiles are chmod 600

sshuttle/firewall.py

@@ -41,7 +41,7 @@ def rewrite_etc_hosts(port):
         os.chmod(tmpname, st.st_mode)
     else:
         os.chown(tmpname, 0, 0)
-        os.chmod(tmpname, 0o644)
+        os.chmod(tmpname, 0o600)
     os.rename(tmpname, HOSTSFILE)
 
 

sshuttle/hostwatch.py

@@ -37,6 +37,7 @@ def write_host_cache():
         for name, ip in sorted(hostnames.items()):
             f.write('%s,%s\n' % (name, ip))
         f.close()
+        os.chmod(tmpname, 0o600)
         os.rename(tmpname, CACHEFILE)
     finally:
         try: