From fe0b2d96f7093800edcf3c083d5955880b3c0146 Mon Sep 17 00:00:00 2001
From: Hendrik Brueckner <brueckner@linux.vnet.ibm.com>
Date: Fri, 18 Aug 2017 12:20:59 +0200
Subject: [PATCH] zkey: properly set umask to prohibit permissions to group and
 others

Set the umask for the zkey process to clear permissions for genernated
secure key files for group and others.

Signed-off-by: Hendrik Brueckner <brueckner@linux.vnet.ibm.com>
Signed-off-by: Michael Holzheu <holzheu@linux.vnet.ibm.com>
---
 zkey/zkey.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/zkey/zkey.c b/zkey/zkey.c
index 351c5eca..3b655518 100644
--- a/zkey/zkey.c
+++ b/zkey/zkey.c
@@ -1108,6 +1108,8 @@ int main(int argc, char *argv[])
 			goto out;
 	}
 
+	umask(S_IRWXG|S_IRWXO);
+
 	rc = command->function(keyfile);
 
 out: