coverity: #1425770

Insecure temporary file

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

diff --git a/src/lxc/utils.c b/src/lxc/utils.c
index 582159c8cdbef6a7c80229b9f551296ce05ceec4..2e4934f848f1516a5ec6239b6f80849ffa572c4f 100644 (file)
--- a/src/lxc/utils.c
+++ b/src/lxc/utils.c
@@ -2378,8 +2378,11 @@ bool lxc_nic_exists(char *nic)
 int lxc_make_tmpfile(char *template, bool rm)
 {
        int fd, ret;
+       mode_t msk;
 
+       msk = umask(0022);
        fd = mkstemp(template);
+       umask(msk);
        if (fd < 0)
                return -1;