hardening: world-writable files: corrected dir variable to file