Ensure default umask to avoid surprises with file permissions.

diff --git a/systemd/waydroid-container.service b/systemd/waydroid-container.service
index c8ffbd81800f09c1c52ce5b62266ba624881bc60..4a863831d049ce34af09908901a8761ab9689ed4 100644 (file)
--- a/systemd/waydroid-container.service
+++ b/systemd/waydroid-container.service
@@ -2,6 +2,7 @@
 Description=Waydroid Container
 
 [Service]
+UMask=0022
 BusName=id.waydro.Container
 ExecStart=/usr/bin/waydroid -w container start
 

diff --git a/waydroid.py b/waydroid.py
index a79b015d51331b006c7a9078ca42f2eee1590623..c9e50b3b9bb92a0edbc26794e083483bf7803ef3 100755 (executable)
--- a/waydroid.py
+++ b/waydroid.py
@@ -2,8 +2,10 @@
 # Copyright 2021 Oliver Smith
 # SPDX-License-Identifier: GPL-3.0-or-later
 # PYTHON_ARGCOMPLETE_OK
+import os
 import sys
 import tools
 
 if __name__ == "__main__":
+    os.umask(0o0022)
     sys.exit(tools.main())