From: Adrian Likins <alikins@redhat.com>
Date: Fri, 24 Apr 2009 17:02:49 +0000 (-0400)
Subject: Set default umask to 077 intead of 0. Before files could be created
X-Git-Tag: v0.25~7
X-Git-Url: https://pwan.org/git/?p=certmaster.git;a=commitdiff_plain;h=69d891253a0aed3a83f09c5d5b091fe6f42d421a

Set default umask to 077 intead of 0. Before files could be created
as world writeable.
---

diff --git a/certmaster/utils.py b/certmaster/utils.py
index 773b0eb..58bf0db 100644
--- a/certmaster/utils.py
+++ b/certmaster/utils.py
@@ -57,7 +57,7 @@ def daemonize(pidfile=None):
         sys.exit(0)
     os.chdir("/")
     os.setsid()
-    os.umask(0)
+    os.umask(077)
     pid = os.fork()
 
     os.close(0)