* Set umask to 0022 on startup.

3 files changed, 6 insertions, 0 deletions

diff --git a/scripts/nix-pull-prebuilts b/scripts/nix-pull-prebuilts
index 9cc6683378df..3d045b46302f 100755
--- a/scripts/nix-pull-prebuilts
+++ b/scripts/nix-pull-prebuilts
@@ -7,6 +7,8 @@ my $tmpfile = "$prefix/var/nix/prebuilts.tmp";
 
 my $conffile = "$etcdir/prebuilts.conf";
 
+umask 0022;
+
 sub register {
     my $fn = shift;
     my $url = shift;
diff --git a/scripts/nix-push-prebuilts b/scripts/nix-push-prebuilts
index c0e3b45c5825..2d44e7cda06d 100755
--- a/scripts/nix-push-prebuilts
+++ b/scripts/nix-push-prebuilts
@@ -5,6 +5,8 @@ my $etcdir = "$prefix/etc/nix";
 my $exportdir = "$prefix/var/nix/prebuilts/exports";
 my $knowns = "$prefix/var/nix/known-prebuilts";
 
+umask 0022;
+
 # For performance, put the known hashes in an associative array.
 my %knowns = ();
 open KNOWNS, "<$knowns";
diff --git a/src/fix.cc b/src/fix.cc
index b26f8eb594bf..30303322a141 100644
--- a/src/fix.cc
+++ b/src/fix.cc
@@ -301,6 +301,8 @@ void printUsage()
 /* Parse the command-line arguments, call the right operation. */
 void run(Strings::iterator argCur, Strings::iterator argEnd)
 {
+    umask(0022);
+
     Strings extraArgs;
     enum { cmdUnknown, cmdInstantiate } command = cmdUnknown;