sbsign: Make sure output file mode respects umask

diff --git a/src/sbsign/sbsign.c b/src/sbsign/sbsign.c
index a45f3ad6ee45e39fd7be2a55af63ce853e5a74ca..a7e4047054c793edb4acf56d5830aa70f4d030ab 100644 (file)
--- a/src/sbsign/sbsign.c
+++ b/src/sbsign/sbsign.c
@@ -254,6 +254,10 @@ static int verb_sign(int argc, char *argv[], void *userdata) {
         if (dstfd < 0)
                 return log_error_errno(r, "Failed to open temporary file: %m");
 
+        r = fchmod_umask(dstfd, 0666);
+        if (r < 0)
+                log_debug_errno(r, "Failed to change temporary file mode: %m");
+
         r = copy_bytes(srcfd, dstfd, UINT64_MAX, COPY_REFLINK);
         if (r < 0)
                 return log_error_errno(r, "Failed to copy %s to %s: %m", argv[1], tmp);