diff options
| author | Irbe Krumina <irbe@tailscale.com> | 2025-03-02 10:22:15 -0800 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2025-03-02 18:22:15 +0000 |
| commit | 986daca5eeeffa04bdb184d1ee13f70d04d33ff1 (patch) | |
| tree | 5e918a17331dad395dfcc2f07dde23cd45c518d5 /scripts | |
| parent | dc18091678ebf3928bf3ead518f2d6e979547526 (diff) | |
| download | tailscale-986daca5eeeffa04bdb184d1ee13f70d04d33ff1.tar.xz tailscale-986daca5eeeffa04bdb184d1ee13f70d04d33ff1.zip | |
scripts/installer.sh: explicitly chmod 0644 installed files (#15171)
Updates tailscale/tailscale#15133
Signed-off-by: Irbe Krumina <irbe@tailscale.com>
Diffstat (limited to 'scripts')
| -rwxr-xr-x | scripts/installer.sh | 11 |
1 files changed, 3 insertions, 8 deletions
diff --git a/scripts/installer.sh b/scripts/installer.sh index 388dd5a56..f3671aff8 100755 --- a/scripts/installer.sh +++ b/scripts/installer.sh @@ -7,14 +7,6 @@ set -eu -# Ensure that this script runs with the default umask for Linux. In practice, -# this means that files created by this script (such as keyring files) will be -# created with 644 permissions. This ensures that keyrings and other files -# created by this script are readable by installers on systems where the -# umask is set to a more restrictive value. -# See https://github.com/tailscale/tailscale/issues/15133 -umask 022 - # All the code is wrapped in a main function that gets called at the # bottom of the file, so that a truncated partial download doesn't end # up executing half a script. @@ -501,10 +493,13 @@ main() { legacy) $CURL "https://pkgs.tailscale.com/$TRACK/$OS/$VERSION.asc" | $SUDO apt-key add - $CURL "https://pkgs.tailscale.com/$TRACK/$OS/$VERSION.list" | $SUDO tee /etc/apt/sources.list.d/tailscale.list + $SUDO chmod 0644 /etc/apt/sources.list.d/tailscale.list ;; keyring) $CURL "https://pkgs.tailscale.com/$TRACK/$OS/$VERSION.noarmor.gpg" | $SUDO tee /usr/share/keyrings/tailscale-archive-keyring.gpg >/dev/null + $SUDO chmod 0644 /usr/share/keyrings/tailscale-archive-keyring.gpg $CURL "https://pkgs.tailscale.com/$TRACK/$OS/$VERSION.tailscale-keyring.list" | $SUDO tee /etc/apt/sources.list.d/tailscale.list + $SUDO chmod 0644 /etc/apt/sources.list.d/tailscale.list ;; esac $SUDO apt-get update |