From 066969339dcd0352965de0ab1b5f693cf2a7fee8 Mon Sep 17 00:00:00 2001
From: Darren Tucker <dtucker@zip.com.au>
Date: Sat, 14 Aug 2004 23:55:37 +1000
Subject:  - (dtucker) [auth-krb5.c gss-serv-krb5.c openbsd-compat/xmmap.c]   
 Explicitly set umask for mkstemp; ok djm@

---
 gss-serv-krb5.c | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

(limited to 'gss-serv-krb5.c')

diff --git a/gss-serv-krb5.c b/gss-serv-krb5.c
index 6bd5830f..91d87f79 100644
--- a/gss-serv-krb5.c
+++ b/gss-serv-krb5.c
@@ -134,11 +134,15 @@ ssh_gssapi_krb5_storecreds(ssh_gssapi_client *client)
 	{
 		int tmpfd;
 		char ccname[40];
+		mode_t old_umask;
 
 		snprintf(ccname, sizeof(ccname),
 		    "FILE:/tmp/krb5cc_%d_XXXXXX", geteuid());
 
-		if ((tmpfd = mkstemp(ccname + strlen("FILE:"))) == -1) {
+		old_umask = umask(0177);
+		tmpfd = mkstemp(ccname + strlen("FILE:"));
+		umask(old_umask);
+		if (tmpfd == -1) {
 			logit("mkstemp(): %.100s", strerror(errno));
 			problem = errno;
 			return;
-- 
cgit v1.2.3