Set umask to 0077 on daemon startup to prevent libuci from making world-readable directories

1 files changed, 2 insertions, 0 deletions

diff --git a/main.c b/main.c
index 0bb06ce..75f5cee 100644
--- a/main.c
+++ b/main.c
@@ -77,6 +77,8 @@ int main(int argc, char **argv)
 	if (stat("/var/run/rpcd", &s))
 		mkdir("/var/run/rpcd", 0700);
 
+	umask(0077);
+
 	signal(SIGPIPE, SIG_IGN);
 	signal(SIGHUP,  handle_signal);
 	signal(SIGUSR1, handle_signal);