ryan77627/guix
1
0
Fork 0
mirror of https://git.in.rschanz.org/ryan77627/guix.git synced 2025-01-26 12:39:36 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

grafts: Make sure files are not created world-writable.

Browse source 
* guix/build/graft.scm (rewrite-directory): Add 'umask' call.
This commit is contained in:
Ludovic Courtès 2016-02-27 23:00:22 +01:00
parent 9c7f7e2da9
commit 82f5186650
1 changed files with 6 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
guix/build/graft.scm
View file

@ -1,5 +1,5 @@
;;; GNU Guix --- Functional package management for GNU ;;; GNU Guix --- Functional package management for GNU
;;; Copyright © 2014, 2015 Ludovic Courtès <ludo@gnu.org> ;;; Copyright © 2014, 2015, 2016 Ludovic Courtès <ludo@gnu.org>
;;; ;;;
;;; This file is part of GNU Guix. ;;; This file is part of GNU Guix.
;;; ;;;
@ -118,6 +118,11 @@ (define (rewrite-leaf file)
(else (else
(error "unsupported file type" stat))))) (error "unsupported file type" stat)))))
;; XXX: Work around occasional "suspicious ownership or permission" daemon
;; errors that arise when we create the top-level /gnu/store/… directory as
;; #o777.
(umask #o022)
(n-par-for-each (parallel-job-count) (n-par-for-each (parallel-job-count)
rewrite-leaf (find-files directory))) rewrite-leaf (find-files directory)))