From: Lennart Poettering <lennart@amutable.com>
Date: Mon, 9 Mar 2026 12:06:42 +0000 (+0100)
Subject: fileio: add WRITE_DATA_FILE_MODE_0400 mode
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=23b4c833a4e1c0dd38b649dc5791c12cac91b403;p=thirdparty%2Fsystemd.git

fileio: add WRITE_DATA_FILE_MODE_0400 mode
---

diff --git a/src/basic/fileio.c b/src/basic/fileio.c
index 66d06484dc9..7edf54edf37 100644
--- a/src/basic/fileio.c
+++ b/src/basic/fileio.c
@@ -1706,7 +1706,7 @@ int write_data_file_atomic_at(
                         return r;
         }
 
-        r = fchmod_umask(fd, 0644);
+        r = fchmod_umask(fd, FLAGS_SET(flags, WRITE_DATA_FILE_MODE_0400) ? 0400 : 0644);
         if (r < 0)
                 return r;
 
diff --git a/src/basic/fileio.h b/src/basic/fileio.h
index 3e2372c4ddd..274fdfbd7c8 100644
--- a/src/basic/fileio.h
+++ b/src/basic/fileio.h
@@ -166,6 +166,7 @@ int fopen_mode_to_flags(const char *mode);
 
 typedef enum WriteDataFileFlags {
         WRITE_DATA_FILE_MKDIR_0755 = 1 << 0,
+        WRITE_DATA_FILE_MODE_0400  = 1 << 1,
 } WriteDataFileFlags;
 
 int write_data_file_atomic_at(int dir_fd, const char *path, const struct iovec *iovec, WriteDataFileFlags flags);