From: Daan De Meyer <daan.j.demeyer@gmail.com>
Date: Sun, 19 Jan 2025 21:48:21 +0000 (+0100)
Subject: sbsign: Make sure output file mode respects umask
X-Git-Tag: v258-rc1~1556^2
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=refs%2Fpull%2F36083%2Fhead;p=thirdparty%2Fsystemd.git

sbsign: Make sure output file mode respects umask
---

diff --git a/src/sbsign/sbsign.c b/src/sbsign/sbsign.c
index a45f3ad6ee4..a7e4047054c 100644
--- a/src/sbsign/sbsign.c
+++ b/src/sbsign/sbsign.c
@@ -254,6 +254,10 @@ static int verb_sign(int argc, char *argv[], void *userdata) {
         if (dstfd < 0)
                 return log_error_errno(r, "Failed to open temporary file: %m");
 
+        r = fchmod_umask(dstfd, 0666);
+        if (r < 0)
+                log_debug_errno(r, "Failed to change temporary file mode: %m");
+
         r = copy_bytes(srcfd, dstfd, UINT64_MAX, COPY_REFLINK);
         if (r < 0)
                 return log_error_errno(r, "Failed to copy %s to %s: %m", argv[1], tmp);