[libproc-daemon-perl] 01/01: Add patch to use more secure umask for pid file (Closes: #732283)

[Axel Beckert]

This is an automated email from the git hooks/post-receive script.

abe pushed a commit to branch master
in repository libproc-daemon-perl.

commit 86e8f7cbf39c33ecde20da0306962275f883ebbb
Author: Axel Beckert <abe at deuxchevaux.org>
Date:   Mon Dec 16 20:34:57 2013 +0100

    Add patch to use more secure umask for pid file (Closes: #732283)
---
 debian/changelog         |  1 +
 debian/patches/pid.patch | 24 ++++++++++++++++++++++++
 debian/patches/series    |  1 +
 3 files changed, 26 insertions(+)

diff --git a/debian/changelog b/debian/changelog
index c72c488..1cc4389 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -12,6 +12,7 @@ libproc-daemon-perl (0.14-2) UNRELEASED; urgency=low
   [ Axel Beckert ]
   * debian/copyright: migrate pre-1.0 format to 1.0 using "cme fix dpkg-
     copyright"
+  * Add patch to use more secure umask for pid file (Closes: #732283)
 
  -- Ansgar Burchardt <ansgar at debian.org>  Wed, 27 Jul 2011 18:47:27 +0200
 
diff --git a/debian/patches/pid.patch b/debian/patches/pid.patch
new file mode 100644
index 0000000..3409dc9
--- /dev/null
+++ b/debian/patches/pid.patch
@@ -0,0 +1,24 @@
+Description: Fix too permissive umask
+Bug-Debian: http://bugs.debian.org/732283
+Author: Axel Beckert <abe at debian.org>
+
+Index: libproc-daemon-perl/lib/Proc/Daemon.pm
+===================================================================
+--- libproc-daemon-perl.orig/lib/Proc/Daemon.pm	2013-08-29 16:50:09.000000000 +0200
++++ libproc-daemon-perl/lib/Proc/Daemon.pm	2013-12-16 20:20:36.000000000 +0100
+@@ -152,7 +152,7 @@
+             die "Can't <chdir> to $self->{work_dir}: $!" unless chdir $self->{work_dir};
+ 
+             # Clear the file creation mask.
+-            umask 0;
++            umask 066;
+ 
+             # Detach the child from the terminal (no controlling tty), make it the
+             # session-leader and the process-group-leader of a new process group.
+@@ -633,4 +633,4 @@
+     return $pid;
+ }
+ 
+-1;
+\ No newline at end of file
++1;
diff --git a/debian/patches/series b/debian/patches/series
index c9352c4..9ec3411 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -1 +1,2 @@
+pid.patch
 pod.patch

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-perl/packages/libproc-daemon-perl.git