From 32c06affca63f12bb1de78e7c1ae52be5b61bb30 Mon Sep 17 00:00:00 2001
From: Tobias Geerinckx-Rice <me@tobias.gr>
Date: Wed, 4 Dec 2019 03:42:28 +0100
Subject: guix-install.sh: Use a deterministic umask.

Users with strict umasks (e.g. 0077) would end up with an unreadable
/gnu (mode 0700) and no way to run guix.

Reported by A. <@aaap:matrix.org> on #guix.

* etc/guix-install.sh (main): Set umask before installing anything.
---
 etc/guix-install.sh | 1 +
 1 file changed, 1 insertion(+)

(limited to 'etc')

diff --git a/etc/guix-install.sh b/etc/guix-install.sh
index bd3ab901ad..111e25fbcb 100755
--- a/etc/guix-install.sh
+++ b/etc/guix-install.sh
@@ -439,6 +439,7 @@ main()
 
     _msg "${INF}system is ${ARCH_OS}"
 
+    umask 0022
     tmp_path="$(mktemp -t -d guix.XXX)"
 
     guix_get_bin_list "${GNU_URL}"
-- 
cgit v1.2.3