Uses umask to avoid creating world-readable files.

2014-09-23 23:44:48 -04:00
parent f521f4c2d4
commit 14edf71e83
2 changed files with 13 additions and 1 deletions
--- a/bin/blackbox_postdeploy
+++ b/bin/blackbox_postdeploy
@@ -41,7 +41,7 @@ echo '========== Decrypting new/changed files: START'
 while read unencrypted_file; do
  encrypted_file=$(get_encrypted_filename "$unencrypted_file")
  decrypt_file_overwrite "$encrypted_file" "$unencrypted_file"
-  chmod g+r,o-rwx "$unencrypted_file"
+  chmod g+r "$unencrypted_file"
  if [[ ! -z "$FILE_GROUP" ]]; then
    chgrp $FILE_GROUP "$unencrypted_file"
  fi