config: disallow negative permissions

[safcm/safcm.git] / cmd / safcm / config / permissions.go

diff --git a/cmd/safcm/config/permissions.go b/cmd/safcm/config/permissions.go
index b84b521d1c615289aeaf17e704bd2ec1dbe79927..4924e2d4af3ba1a014e06d53496eb8dae3be2b99 100644 (file)
--- a/cmd/safcm/config/permissions.go
+++ b/cmd/safcm/config/permissions.go
@@ -65,7 +65,7 @@ func LoadPermissions(group string, files map[string]*safcm.File) error {
                                "(expected e.g. %q or %q)",
                                path, xs[0], "0644", "01777")
                }
-               if perm > 07777 {
+               if perm < 0 || perm > 07777 {
                        return fmt.Errorf("%s: invalid permission %#o "+
                                "(expected e.g. %#o or %#o)",
                                path, perm, 0644, 01777)