[Vmdebootstrap-devel] Bug#886691: vmdebootstrap creates world-readable images

[Jakub Wilk]

Package: vmdebootstrap
Version: 1.8-1
Tags: security

Despite my restrictive umask, vmdebootstrap created the image file 
readable to everyone:

    # umask
    0077
    # vmdebootstrap --grub --image vm.img --size=1G
    # ls -l vm.img
    -rw-r--r-- 1 root root 1000000000 Jan  8 22:31 vm.img


-- System Information:
Architecture: i386

Versions of packages vmdebootstrap depends on:
ii  debootstrap         1.0.93
ii  qemu-utils          1:2.10.0+dfsg-2
ii  kpartx              0.7.4-2
ii  parted              3.2-18
ii  libjs-sphinxdoc     1.6.5-4
ii  python-cliapp       1.20170827-1
ii  python-distro-info  0.17
ii  python2.7           2.7.14-4
ii  python              2.7.14-4

-- 
Jakub Wilk