~ruther/guix-local

82f5186650dc5546eaa4cdc918c444632fa8086f — Ludovic Courtès 10 years ago 9c7f7e2
grafts: Make sure files are not created world-writable.

* guix/build/graft.scm (rewrite-directory): Add 'umask' call.
1 files changed, 6 insertions(+), 1 deletions(-)

M guix/build/graft.scm
M guix/build/graft.scm => guix/build/graft.scm +6 -1
@@ 1,5 1,5 @@
;;; GNU Guix --- Functional package management for GNU
;;; Copyright © 2014, 2015 Ludovic Courtès <ludo@gnu.org>
;;; Copyright © 2014, 2015, 2016 Ludovic Courtès <ludo@gnu.org>
;;;
;;; This file is part of GNU Guix.
;;;


@@ 118,6 118,11 @@ file name pairs."
        (else
         (error "unsupported file type" stat)))))

  ;; XXX: Work around occasional "suspicious ownership or permission" daemon
  ;; errors that arise when we create the top-level /gnu/store/… directory as
  ;; #o777.
  (umask #o022)

  (n-par-for-each (parallel-job-count)
                  rewrite-leaf (find-files directory)))