umask: change default umask to 0022 just to be sure, and set it explicitly in all...

diff --git a/src/binfmt.c b/src/binfmt.c
index a815a112e8cbe327db4c9c7ca4b3be66cf4ac664..552d8cc227ec5131c1071573560197782e1b6181 100644 (file)
--- a/src/binfmt.c
+++ b/src/binfmt.c
@@ -127,6 +127,8 @@ int main(int argc, char *argv[]) {
         log_parse_environment();
         log_open();
 
+        umask(0022);
+
         if (argc > 1) {
                 r = apply_file(argv[1], false);
         } else {

diff --git a/src/cryptsetup-generator.c b/src/cryptsetup-generator.c
index db8ebdfb1882cfe00301af142f4908bcaee9e779..a340218fda0d177bb1b2811bac3a075ca609ebe8 100644 (file)
--- a/src/cryptsetup-generator.c
+++ b/src/cryptsetup-generator.c
@@ -246,6 +246,8 @@ int main(int argc, char *argv[]) {
         log_parse_environment();
         log_open();
 
+        umask(0022);
+
         if (!(f = fopen("/etc/crypttab", "re"))) {
 
                 if (errno == ENOENT)

diff --git a/src/cryptsetup.c b/src/cryptsetup.c
index c0caf9a93035e38155cf88f0196721471066ee7a..cf288de63141274da738339dd9fb93cc4affb18b 100644 (file)
--- a/src/cryptsetup.c
+++ b/src/cryptsetup.c
@@ -241,6 +241,8 @@ int main(int argc, char *argv[]) {
         log_parse_environment();
         log_open();
 
+        umask(0022);
+
         if (streq(argv[1], "attach")) {
                 uint32_t flags = 0;
                 int k;

diff --git a/src/execute.c b/src/execute.c
index 7b2567976d3c40b732d8443be7872d9ec1af7a15..f07d018a37a29468707f0956fc2e9d3cdea7fc3b 100644 (file)
--- a/src/execute.c
+++ b/src/execute.c
@@ -1402,7 +1402,7 @@ fail_parent:
 void exec_context_init(ExecContext *c) {
         assert(c);
 
-        c->umask = 0002;
+        c->umask = 0022;
         c->ioprio = IOPRIO_PRIO_VALUE(IOPRIO_CLASS_BE, 0);
         c->cpu_sched_policy = SCHED_OTHER;
         c->syslog_priority = LOG_DAEMON|LOG_INFO;

diff --git a/src/fsck.c b/src/fsck.c
index 19ca75311ba50dbbfe20cadf81bbd12538e89f59..5d9cf24f4d2d8150d83f4099be4229453b58803d 100644 (file)
--- a/src/fsck.c
+++ b/src/fsck.c
@@ -163,6 +163,8 @@ int main(int argc, char *argv[]) {
         log_parse_environment();
         log_open();
 
+        umask(0022);
+
         parse_proc_cmdline();
         test_files();
 

diff --git a/src/getty-generator.c b/src/getty-generator.c
index 7b91094b313b6be4527d30379b231a5a11a13b0e..b8228e98223f83506a54019f427389f46a18f959 100644 (file)
--- a/src/getty-generator.c
+++ b/src/getty-generator.c
@@ -73,6 +73,8 @@ int main(int argc, char *argv[]) {
         log_parse_environment();
         log_open();
 
+        umask(0022);
+
         if (detect_container(NULL) > 0) {
                 log_debug("Automatic adding console shell.");
 

diff --git a/src/hostnamed.c b/src/hostnamed.c
index 7b2ce691a378a244bbb5112753ffad8792c98659..e3b89a4c62e0b9bf7aac1de67833e8380c7668d5 100644 (file)
--- a/src/hostnamed.c
+++ b/src/hostnamed.c
@@ -559,6 +559,8 @@ int main(int argc, char *argv[]) {
         log_parse_environment();
         log_open();
 
+        umask(0022);
+
         if (argc == 2 && streq(argv[1], "--introspect")) {
                 fputs(DBUS_INTROSPECT_1_0_XML_DOCTYPE_DECL_NODE
                       "<node>\n", stdout);
@@ -576,8 +578,6 @@ int main(int argc, char *argv[]) {
         if (!check_nss())
                 log_warning("Warning: nss-myhostname is not installed. Changing the local hostname might make it unresolveable. Please install nss-myhostname!");
 
-        umask(0022);
-
         r = read_data();
         if (r < 0) {
                 log_error("Failed to read hostname data: %s", strerror(-r));

diff --git a/src/initctl.c b/src/initctl.c
index dd743142fd10dff952f8d20c5854eca26838f412..7096a824b0ecfc092d1e752710c1533224ba6577 100644 (file)
--- a/src/initctl.c
+++ b/src/initctl.c
@@ -364,6 +364,8 @@ int main(int argc, char *argv[]) {
         log_parse_environment();
         log_open();
 
+        umask(0022);
+
         if ((n = sd_listen_fds(true)) < 0) {
                 log_error("Failed to read listening file descriptors from environment: %s", strerror(-r));
                 return EXIT_FAILURE;

diff --git a/src/kmsg-syslogd.c b/src/kmsg-syslogd.c
index 60d3244b3bd126ebc98bec1da79cfd780734d5b3..83c2047a7ae0f0d1285ffa328a137ff7030b3c35 100644 (file)
--- a/src/kmsg-syslogd.c
+++ b/src/kmsg-syslogd.c
@@ -455,6 +455,8 @@ int main(int argc, char *argv[]) {
         log_parse_environment();
         log_open();
 
+        umask(0022);
+
         if ((n = sd_listen_fds(true)) < 0) {
                 log_error("Failed to read listening file descriptors from environment: %s", strerror(-r));
                 return EXIT_FAILURE;

diff --git a/src/localed.c b/src/localed.c
index 93e4e9bd56f2e181863ccdbc28337d17924fbd2c..cb8acf2079e841c44d5d197efc3bc170e2215c7d 100644 (file)
--- a/src/localed.c
+++ b/src/localed.c
@@ -575,6 +575,8 @@ int main(int argc, char *argv[]) {
         log_parse_environment();
         log_open();
 
+        umask(0022);
+
         if (argc == 2 && streq(argv[1], "--introspect")) {
                 fputs(DBUS_INTROSPECT_1_0_XML_DOCTYPE_DECL_NODE
                       "<node>\n", stdout);
@@ -589,8 +591,6 @@ int main(int argc, char *argv[]) {
                 goto finish;
         }
 
-        umask(0022);
-
         r = read_data();
         if (r < 0) {
                 log_error("Failed to read locale data: %s", strerror(-r));

diff --git a/src/logger.c b/src/logger.c
index 81196dbe00cd0e0734989d22149439bd5e040d14..435d5a7620d6521f9ccedaa04200bac915627d2b 100644 (file)
--- a/src/logger.c
+++ b/src/logger.c
@@ -637,6 +637,8 @@ int main(int argc, char *argv[]) {
         log_parse_environment();
         log_open();
 
+        umask(0022);
+
         if ((n = sd_listen_fds(true)) < 0) {
                 log_error("Failed to read listening file descriptors from environment: %s", strerror(-r));
                 return EXIT_FAILURE;

diff --git a/src/logind.c b/src/logind.c
index ca48aa137fa4b9b75f03e1f7610c269f1007c0c6..b84242e1ed74d95159a626730bcaed5671ba9ac7 100644 (file)
--- a/src/logind.c
+++ b/src/logind.c
@@ -1193,14 +1193,14 @@ int main(int argc, char *argv[]) {
         log_parse_environment();
         log_open();
 
+        umask(0022);
+
         if (argc != 1) {
                 log_error("This program takes no arguments.");
                 r = -EINVAL;
                 goto finish;
         }
 
-        umask(0022);
-
         m = manager_new();
         if (!m) {
                 log_error("Out of memory");

diff --git a/src/machine-id-setup.c b/src/machine-id-setup.c
index be51d0dec73c2ba3697803480cac37a83e129c17..519521fe6768f9de96fffb8bc44fc314a54991f7 100644 (file)
--- a/src/machine-id-setup.c
+++ b/src/machine-id-setup.c
@@ -167,7 +167,10 @@ int machine_id_setup(void) {
 
         mkdir_p("/run/systemd", 0755);
 
+        m = umask(0022);
         r = write_one_line_file("/run/systemd/machine-id", id);
+        umask(m);
+
         if (r < 0) {
                 log_error("Cannot write /run/systemd/machine-id: %s", strerror(-r));
 

diff --git a/src/modules-load.c b/src/modules-load.c
index d76defa515732896d61f2d11a9ce1e7b6b432860..4b3b12109c311d237f057a48247a0bd08c44a12d 100644 (file)
--- a/src/modules-load.c
+++ b/src/modules-load.c
@@ -46,6 +46,8 @@ int main(int argc, char *argv[]) {
         log_parse_environment();
         log_open();
 
+        umask(0022);
+
         if (!(arguments = strv_new("/sbin/modprobe", "-sab", "--", NULL))) {
                 log_error("Failed to allocate string array");
                 goto finish;

diff --git a/src/nspawn.c b/src/nspawn.c
index a1ed425f05818ab970d262447e467ad71ac63351..f4d63ea26536fe28553678e78cb9fa0e1ac7777f 100644 (file)
--- a/src/nspawn.c
+++ b/src/nspawn.c
@@ -314,7 +314,6 @@ static int copy_devnodes(const char *dest, const char *console) {
         }
 
 finish:
-
         umask(u);
 
         return r;
@@ -776,7 +775,7 @@ int main(int argc, char *argv[]) {
                         goto child_fail;
                 }
 
-                umask(0002);
+                umask(0022);
 
                 if (drop_capabilities() < 0)
                         goto child_fail;

diff --git a/src/quotacheck.c b/src/quotacheck.c
index ba12b27caa269215f50bdc1feabbb12991a609a6..c475cecc91fb8bccab0962fc526e1276986d17ff 100644 (file)
--- a/src/quotacheck.c
+++ b/src/quotacheck.c
@@ -90,6 +90,8 @@ int main(int argc, char *argv[]) {
         log_parse_environment();
         log_open();
 
+        umask(0022);
+
         parse_proc_cmdline();
         test_files();
 

diff --git a/src/random-seed.c b/src/random-seed.c
index 054233e66035210b9d10dcfd404004932f4efaeb..ee5cae315c24db36e5a7749a94786275920a8601 100644 (file)
--- a/src/random-seed.c
+++ b/src/random-seed.c
@@ -47,6 +47,8 @@ int main(int argc, char *argv[]) {
         log_parse_environment();
         log_open();
 
+        umask(0022);
+
         /* Read pool size, if possible */
         if ((f = fopen("/proc/sys/kernel/random/poolsize", "re"))) {
                 fscanf(f, "%zu", &buf_size);

diff --git a/src/readahead-collect.c b/src/readahead-collect.c
index 20881b3944673c4fb33b9a2ec6a34492d5e8fe43..df467f1a42d71182df432b09ae4d986bcdc52f28 100644 (file)
--- a/src/readahead-collect.c
+++ b/src/readahead-collect.c
@@ -656,6 +656,8 @@ int main(int argc, char *argv[]) {
         log_parse_environment();
         log_open();
 
+        umask(0022);
+
         if ((r = parse_argv(argc, argv)) <= 0)
                 return r < 0 ? EXIT_FAILURE : EXIT_SUCCESS;
 

diff --git a/src/readahead-replay.c b/src/readahead-replay.c
index 0b84528b0ee3d27dbae8cc8ccaa75511e6322200..e97a0cfbbf2f3eaf99c487b54cc4ffafe1ae08db 100644 (file)
--- a/src/readahead-replay.c
+++ b/src/readahead-replay.c
@@ -340,6 +340,8 @@ int main(int argc, char*argv[]) {
         log_parse_environment();
         log_open();
 
+        umask(0022);
+
         if ((r = parse_argv(argc, argv)) <= 0)
                 return r < 0 ? EXIT_FAILURE : EXIT_SUCCESS;
 

diff --git a/src/remount-api-vfs.c b/src/remount-api-vfs.c
index 5b1872833a5d5bc4e35ef95be85367fa908db53d..8bbc021dc43af335a00afed000dc2e3ad0844e31 100644 (file)
--- a/src/remount-api-vfs.c
+++ b/src/remount-api-vfs.c
@@ -52,6 +52,8 @@ int main(int argc, char *argv[]) {
         log_parse_environment();
         log_open();
 
+        umask(0022);
+
         if (!(f = setmntent("/etc/fstab", "r"))) {
                 log_error("Failed to open /etc/fstab: %m");
                 goto finish;

diff --git a/src/shutdown.c b/src/shutdown.c
index 52bad21971f810ebceeee85ef2ac908d0c83e640..1c6dc6597b6598245e116926808ccae11a53d902 100644 (file)
--- a/src/shutdown.c
+++ b/src/shutdown.c
@@ -295,6 +295,8 @@ int main(int argc, char *argv[]) {
         log_set_target(LOG_TARGET_CONSOLE); /* syslog will die if not gone yet */
         log_open();
 
+        umask(0022);
+
         if (getpid() != 1) {
                 log_error("Not executed by init (pid 1).");
                 r = -EPERM;

diff --git a/src/shutdownd.c b/src/shutdownd.c
index 49ab8863e4156421461434c5af870984ea312ca4..0ffa8b28815f4c1805b14e16c77cc7853609f272 100644 (file)
--- a/src/shutdownd.c
+++ b/src/shutdownd.c
@@ -193,6 +193,8 @@ int main(int argc, char *argv[]) {
         log_parse_environment();
         log_open();
 
+        umask(0022);
+
         if ((n_fds = sd_listen_fds(true)) < 0) {
                 log_error("Failed to read listening file descriptors from environment: %s", strerror(-r));
                 return EXIT_FAILURE;

diff --git a/src/sysctl.c b/src/sysctl.c
index 9f7acfce8b09f76d67247c0d82caa2c35baed5aa..8bdfb0811ce880b01601c7120f549a62cb785394 100644 (file)
--- a/src/sysctl.c
+++ b/src/sysctl.c
@@ -228,6 +228,8 @@ int main(int argc, char *argv[]) {
         log_parse_environment();
         log_open();
 
+        umask(0022);
+
         if (argc > optind)
                 r = apply_file(argv[optind], false);
         else {

diff --git a/src/timedated.c b/src/timedated.c
index 4abcf1af73df3a88f0a48b3383cfabd15077ee62..4bde0355a55e391949693ffe8598c88f4d72adec 100644 (file)
--- a/src/timedated.c
+++ b/src/timedated.c
@@ -578,6 +578,8 @@ int main(int argc, char *argv[]) {
         log_parse_environment();
         log_open();
 
+        umask(0022);
+
         if (argc == 2 && streq(argv[1], "--introspect")) {
                 fputs(DBUS_INTROSPECT_1_0_XML_DOCTYPE_DECL_NODE
                       "<node>\n", stdout);
@@ -592,8 +594,6 @@ int main(int argc, char *argv[]) {
                 goto finish;
         }
 
-        umask(0022);
-
         r = read_data();
         if (r < 0) {
                 log_error("Failed to read timezone data: %s", strerror(-r));

diff --git a/src/tmpfiles.c b/src/tmpfiles.c
index 3a1985a36334c1b01dd1b6651fa39dbb89fd71fd..421a9154c5b0c1cdee9a21460f146ff2ddcb8390 100644 (file)
--- a/src/tmpfiles.c
+++ b/src/tmpfiles.c
@@ -972,6 +972,8 @@ int main(int argc, char *argv[]) {
         log_parse_environment();
         log_open();
 
+        umask(0022);
+
         label_init();
 
         items = hashmap_new(string_hash_func, string_compare_func);

diff --git a/src/tty-ask-password-agent.c b/src/tty-ask-password-agent.c
index ca183c350b2143cadf73ee744b9000bdb0959e19..43d008fc7038278588116578eaf67051d5231094 100644 (file)
--- a/src/tty-ask-password-agent.c
+++ b/src/tty-ask-password-agent.c
@@ -728,6 +728,8 @@ int main(int argc, char *argv[]) {
         log_parse_environment();
         log_open();
 
+        umask(0022);
+
         if ((r = parse_argv(argc, argv)) <= 0)
                 goto finish;
 

diff --git a/src/uaccess.c b/src/uaccess.c
index 786f0ef6418b71e2611e28b7f7b4e659134c39b7..49ac4af0f4c18c704c789bb060bc552590fbf99c 100644 (file)
--- a/src/uaccess.c
+++ b/src/uaccess.c
@@ -38,6 +38,8 @@ int main(int argc, char *argv[]) {
         log_parse_environment();
         log_open();
 
+        umask(0022);
+
         if (argc < 2 || argc > 3) {
                 log_error("This program expects one or two arguments.");
                 r = -EINVAL;

diff --git a/src/update-utmp.c b/src/update-utmp.c
index b06f5a06cb6be57a19de2838a6bc4cbb480c8836..f81e7f495f864c25949c2bafdbec0878b32ae34d 100644 (file)
--- a/src/update-utmp.c
+++ b/src/update-utmp.c
@@ -373,6 +373,8 @@ int main(int argc, char *argv[]) {
         log_parse_environment();
         log_open();
 
+        umask(0022);
+
 #ifdef HAVE_AUDIT
         if ((c.audit_fd = audit_open()) < 0)
                 log_error("Failed to connect to audit log: %m");

diff --git a/src/user-sessions.c b/src/user-sessions.c
index ffb865743676d5fe7282446233dca1a7e01f3e40..df46b76c872842597597e1661da4b7e29ec1a329 100644 (file)
--- a/src/user-sessions.c
+++ b/src/user-sessions.c
@@ -39,6 +39,8 @@ int main(int argc, char*argv[]) {
         log_parse_environment();
         log_open();
 
+        umask(0022);
+
         if (streq(argv[1], "start")) {
                 int q = 0, r = 0;
 

diff --git a/src/vconsole-setup.c b/src/vconsole-setup.c
index 68ebac9ae498345d2f154907024dab6fa158eff2..4347a2078f64b6aa55302185b16131bcf9bf2fca 100644 (file)
--- a/src/vconsole-setup.c
+++ b/src/vconsole-setup.c
@@ -171,6 +171,8 @@ int main(int argc, char **argv) {
         log_parse_environment();
         log_open();
 
+        umask(0022);
+
         if (argv[1])
                 vc = argv[1];
         else