From bcc20c5f3dffe91e3a3cf3e5cea879fe093bad38 Mon Sep 17 00:00:00 2001
From: Michael Tremer <michael.tremer@ipfire.org>
Date: Sat, 11 Jan 2025 17:44:44 +0000
Subject: [PATCH] jail: Reset umask to 022

Fixes: #13806
Reported-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---
 src/pakfire/jail.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/pakfire/jail.c b/src/pakfire/jail.c
index 1941c889a..48940fe04 100644
--- a/src/pakfire/jail.c
+++ b/src/pakfire/jail.c
@@ -32,6 +32,7 @@
 #include <sys/personality.h>
 #include <sys/prctl.h>
 #include <sys/resource.h>
+#include <sys/stat.h>
 #include <sys/types.h>
 
 // libnl3
@@ -1254,6 +1255,9 @@ static int pakfire_jail_child(struct pakfire_jail* jail, struct pakfire_jail_exe
 		}
 	}
 
+	// Reset umask to 022 - this always succeeds
+	umask(S_IWGRP|S_IWOTH);
+
 	// Create a new session
 	r = setsid();
 	if (r < 0) {
-- 
2.47.3