coverity: #1425770

Insecure temporary file

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

diff --git a/src/lxc/utils.c b/src/lxc/utils.c
index 12f2cd44911fd3124066541bd47734fcd8f6dcec..7aafddaff12f15cbb2833bc90059734f55f79633 100644 (file)
--- a/src/lxc/utils.c
+++ b/src/lxc/utils.c
@@ -2411,8 +2411,11 @@ bool lxc_nic_exists(char *nic)
 int lxc_make_tmpfile(char *template, bool rm)
 {
        int fd, ret;
+       mode_t msk;
 
+       msk = umask(0022);
        fd = mkstemp(template);
+       umask(msk);
        if (fd < 0)
                return -1;