tighten security

1 files changed, 5 insertions, 2 deletions

diff --git a/src/firejail/fs_mkdir.c b/src/firejail/fs_mkdir.c
index 5bc2df2cc..b2a5927e6 100644
--- a/src/firejail/fs_mkdir.c
+++ b/src/firejail/fs_mkdir.c
@@ -119,9 +119,12 @@ void fs_mkfile(const char *name) {
                 if (!fp)
                         fprintf(stderr, "Warning: cannot create %s file\n", expanded);
                 else {
-                        fclose(fp);
-                        int rv = chmod(expanded, 0600);
+                        int fd = fileno(fp);
+                        if (fd == -1)
+                                errExit("fileno");
+                        int rv = fchmod(fd, 0600);
                         (void) rv;
+                        fclose(fp);
                 }
                 exit(0);
         }