Set umask in compos_key_cmd.
The generated files should not be world readable/writable.
Bug: 190166662
Test: Run compos_key_cmd --generate, check files.
Change-Id: I8d2abee6d7eb4946b9ad2ec6df52b8e3590534b1
diff --git a/compos/compos_key_cmd/compos_key_cmd.cpp b/compos/compos_key_cmd/compos_key_cmd.cpp
index 5047a48..3fe843a 100644
--- a/compos/compos_key_cmd/compos_key_cmd.cpp
+++ b/compos/compos_key_cmd/compos_key_cmd.cpp
@@ -232,6 +232,9 @@
}
int main(int argc, char** argv) {
+ // Restrict access to our outputs to the current user.
+ umask(077);
+
if (argc == 4 && argv[1] == "--generate"sv) {
auto result = generate(argv[2], argv[3]);
if (result.ok()) {