summaryrefslogtreecommitdiff
path: root/pre-commit.d/10store-metadata
diff options
context:
space:
mode:
Diffstat (limited to 'pre-commit.d/10store-metadata')
-rwxr-xr-xpre-commit.d/10store-metadata6
1 files changed, 4 insertions, 2 deletions
diff --git a/pre-commit.d/10store-metadata b/pre-commit.d/10store-metadata
index 7958888..b878abd 100755
--- a/pre-commit.d/10store-metadata
+++ b/pre-commit.d/10store-metadata
@@ -1,11 +1,13 @@
#!/bin/sh
set -e
+# Make sure the file is not readable by others, since it can leak
+# information about contents of non-readable directories in /etc.
+umask 077
+
# ensure the file exists so that it will list its own metadata
if [ ! -e .metadata ]; then
metastore --save
- # the file could leak hidden dir contents..
- chmod 600 .metadata
fi
# metastore doesn't produce the same output file for the same metadata