Set default umask to 077 intead of 0. Before files could be created

as world writeable.

diff --git a/certmaster/utils.py b/certmaster/utils.py
index 773b0eb..58bf0db 100644 (file)
--- a/certmaster/utils.py
+++ b/certmaster/utils.py
@@ -57,7 +57,7 @@ def daemonize(pidfile=None):
         sys.exit(0)
     os.chdir("/")
     os.setsid()
-    os.umask(0)
+    os.umask(077)
     pid = os.fork()
 
     os.close(0)