[jboss-cvs] Picketbox SVN: r146 - trunk/security-jboss-sx/jbosssx/src/main/java/org/jboss/security/plugins.

[jboss-cvs-commits at lists.jboss.org]

Author: mmoyses
Date: 2011-01-04 10:43:42 -0500 (Tue, 04 Jan 2011)
New Revision: 146

Modified:
   trunk/security-jboss-sx/jbosssx/src/main/java/org/jboss/security/plugins/FilePassword.java
Log:
SECURITY-292: file should be read only when decrypting password

Modified: trunk/security-jboss-sx/jbosssx/src/main/java/org/jboss/security/plugins/FilePassword.java
===================================================================
--- trunk/security-jboss-sx/jbosssx/src/main/java/org/jboss/security/plugins/FilePassword.java	2010-11-16 22:14:04 UTC (rev 145)
+++ trunk/security-jboss-sx/jbosssx/src/main/java/org/jboss/security/plugins/FilePassword.java	2011-01-04 15:43:42 UTC (rev 146)
@@ -107,7 +107,7 @@
    public char[] toCharArray()
       throws IOException
    {
-      RandomAccessFile raf = new RandomAccessFile(passwordFile, "rws");
+      RandomAccessFile raf = new RandomAccessFile(passwordFile, "r");
       try
       {
          char[] password = decode(raf);