From 2d93c6fb02e828f4b50a3c41e04b6532b50c5c84 Mon Sep 17 00:00:00 2001
From: Lukas Schauer <lukas@schauer.so>
Date: Mon, 7 Dec 2015 13:22:25 +0100
Subject: [PATCH] umask in import script

---
 import.sh | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/import.sh b/import.sh
index 1bfcbe0..06ef009 100755
--- a/import.sh
+++ b/import.sh
@@ -4,6 +4,8 @@ set -e
 set -u
 set -o pipefail
 
+umask 077 # paranoid umask, we're creating private keys
+
 SCRIPTDIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
 BASEDIR="${SCRIPTDIR}"
 LETSENCRYPT="/etc/letsencrypt"
-- 
2.47.2