me/guix
Archived
1
0
Fork 0
Code Activity

guix-install.sh: Use a deterministic umask.

Browse source 
Users with strict umasks (e.g. 0077) would end up with an unreadable
/gnu (mode 0700) and no way to run guix.

Reported by A. <@aaap:matrix.org> on #guix.

* etc/guix-install.sh (main): Set umask before installing anything.
This commit is contained in:
Tobias Geerinckx-Rice 2019-12-04 03:42:28 +01:00
parent 4c16ffd383
commit 32c06affca
No known key found for this signature in database
GPG key ID: D889B0F018C5493C
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
etc/guix-install.sh
View file

@ -439,6 +439,7 @@ main()
_msg "${INF}system is ${ARCH_OS}" _msg "${INF}system is ${ARCH_OS}"
umask 0022
tmp_path="$(mktemp -t -d guix.XXX)" tmp_path="$(mktemp -t -d guix.XXX)"
guix_get_bin_list "${GNU_URL}" guix_get_bin_list "${GNU_URL}"