summary refs log tree commit diff
diff options
context:
space:
mode:
authorTobias Geerinckx-Rice <me@tobias.gr>2019-12-04 03:42:28 +0100
committerTobias Geerinckx-Rice <me@tobias.gr>2019-12-04 03:59:04 +0100
commit32c06affca63f12bb1de78e7c1ae52be5b61bb30 (patch)
tree1e25352a4e7ac55eee56b47e80b9937a8f90b3e7
parent4c16ffd383592854e2760004d2df354f85b32e57 (diff)
downloadguix-32c06affca63f12bb1de78e7c1ae52be5b61bb30.tar.gz
guix-install.sh: Use a deterministic umask.
Users with strict umasks (e.g. 0077) would end up with an unreadable
/gnu (mode 0700) and no way to run guix.

Reported by A. <@aaap:matrix.org> on #guix.

* etc/guix-install.sh (main): Set umask before installing anything.
-rwxr-xr-xetc/guix-install.sh1
1 files changed, 1 insertions, 0 deletions
diff --git a/etc/guix-install.sh b/etc/guix-install.sh
index bd3ab901ad..111e25fbcb 100755
--- a/etc/guix-install.sh
+++ b/etc/guix-install.sh
@@ -439,6 +439,7 @@ main()
 
     _msg "${INF}system is ${ARCH_OS}"
 
+    umask 0022
     tmp_path="$(mktemp -t -d guix.XXX)"
 
     guix_get_bin_list "${GNU_URL}"