futurile/guix-play
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

grafts: Make sure files are not created world-writable.

Browse Source 
* guix/build/graft.scm (rewrite-directory): Add 'umask' call.
This commit is contained in:
Ludovic Courtès 2016-02-27 23:00:22 +01:00
parent 9c7f7e2da9
commit 82f5186650
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
guix/build/graft.scm
View File

@ -1,5 +1,5 @@
;;; GNU Guix --- Functional package management for GNU
;;; Copyright © 2014, 2015 Ludovic Courtès <ludo@gnu.org>
;;; Copyright © 2014, 2015, 2016 Ludovic Courtès <ludo@gnu.org>
;;;
;;; This file is part of GNU Guix.
;;;
@ -118,6 +118,11 @@ file name pairs."
(else
(error "unsupported file type" stat)))))
;; XXX: Work around occasional "suspicious ownership or permission" daemon
;; errors that arise when we create the top-level /gnu/store/… directory as
;; #o777.
(umask #o022)
(n-par-for-each (parallel-job-count)
rewrite-leaf (find-files directory)))