Skip to content

Fix keyfile permissions #3

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
joshWretlind merged 3 commits into from
Feb 18, 2026
Merged

Fix keyfile permissions #3

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
adefcd9
Fix keyfile permissions
joshWretlind Feb 17, 2026
e11f3fd
Remove extra debug line
joshWretlind Feb 17, 2026
f5ae072
Update build/ps-entry.sh
joshWretlind Feb 17, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
22 changes: 22 additions & 0 deletions build/ps-entry.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -462,6 +462,28 @@ if [[ $originalArgOne == mongo* ]]; then
fi
fi

keyFilePath=""
if _mongod_hack_have_arg --keyFile "${mongodHackedArgs[@]}"; then
keyFilePath="$(_mongod_hack_get_arg_val --keyFile "${mongodHackedArgs[@]}")"
elif _parse_config "${mongodHackedArgs[@]}"; then
keyFilePath="$(jq -r '.security.keyFile // empty' "$jsonConfigFile")"
fi

if [ -n "$keyFilePath" ] && [ -f "$keyFilePath" ]; then
keyFileTmp="${TMPDIR:-/tmp}/mongodb-keyfile"
if [ "$keyFilePath" != "$keyFileTmp" ]; then
if ! cp -f "$keyFilePath" "$keyFileTmp"; then
echo >&2 "error: failed to copy keyFile from $keyFilePath to $keyFileTmp"
exit 1
fi
fi
if ! chmod 0400 "$keyFileTmp"; then
echo >&2 "error: failed to chmod keyFile $keyFileTmp"
exit 1
fi
_mongod_hack_ensure_arg_val --keyFile "$keyFileTmp" "${mongodHackedArgs[@]}"
fi

if [ "$MONGODB_VERSION" != 'v4.0' ]; then
_mongod_hack_rename_arg '--sslAllowInvalidCertificates' '--tlsAllowInvalidCertificates' "${mongodHackedArgs[@]}"
_mongod_hack_rename_arg '--sslAllowInvalidHostnames' '--tlsAllowInvalidHostnames' "${mongodHackedArgs[@]}"
Expand Down
Loading