01/03: grafts: Make sure files are not created world-writable.

[Ludovic Courtès]

civodul pushed a commit to branch master
in repository guix.

commit 82f5186650dc5546eaa4cdc918c444632fa8086f
Author: Ludovic Courtès <address@hidden>
Date:   Sat Feb 27 23:00:22 2016 +0100

    grafts: Make sure files are not created world-writable.
    
    * guix/build/graft.scm (rewrite-directory): Add 'umask' call.
---
 guix/build/graft.scm |    7 ++++++-
 1 files changed, 6 insertions(+), 1 deletions(-)

diff --git a/guix/build/graft.scm b/guix/build/graft.scm
index 0a9cd32..b216e6c 100644
--- a/guix/build/graft.scm
+++ b/guix/build/graft.scm
@@ -1,5 +1,5 @@
 ;;; GNU Guix --- Functional package management for GNU
-;;; Copyright © 2014, 2015 Ludovic Courtès <address@hidden>
+;;; Copyright © 2014, 2015, 2016 Ludovic Courtès <address@hidden>
 ;;;
 ;;; This file is part of GNU Guix.
 ;;;
@@ -118,6 +118,11 @@ file name pairs."
         (else
          (error "unsupported file type" stat)))))
 
+  ;; XXX: Work around occasional "suspicious ownership or permission" daemon
+  ;; errors that arise when we create the top-level /gnu/store/… directory as
+  ;; #o777.
+  (umask #o022)
+
   (n-par-for-each (parallel-job-count)
                   rewrite-leaf (find-files directory)))