home: hub: mkinitfs

Info  •  Files  •  Log

mkinitfs: ensure that initramfs image is not world writable

--- a/mkinitfs.in

+++ b/mkinitfs.in

@@ -143,6 +143,8 @@

 initfs_cpio() {

 	[ -n "$list_sources" ] && return

+	rm -f $outfile

+	umask 0022

 	(cd "$tmpdir" && find . | cpio -o -H newc | gzip) > $outfile

 }