From 69d891253a0aed3a83f09c5d5b091fe6f42d421a Mon Sep 17 00:00:00 2001
From: Adrian Likins <alikins@redhat.com>
Date: Fri, 24 Apr 2009 13:02:49 -0400
Subject: [PATCH] Set default umask to 077 intead of 0. Before files could be
 created as world writeable.

---
 certmaster/utils.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/certmaster/utils.py b/certmaster/utils.py
index 773b0eb..58bf0db 100644
--- a/certmaster/utils.py
+++ b/certmaster/utils.py
@@ -57,7 +57,7 @@ def daemonize(pidfile=None):
         sys.exit(0)
     os.chdir("/")
     os.setsid()
-    os.umask(0)
+    os.umask(077)
     pid = os.fork()
 
     os.close(0)
-- 
2.39.2