scripts/installer.sh: ensure default umask for the installer (#15139)

Ensures default Linux umask 022 for the installer script to
make sure that files created by the installer can be accessed
by other tools, such as apt.

Updates tailscale/tailscale#15133

Signed-off-by: Irbe Krumina <irbe@tailscale.com>
This commit is contained in:
Irbe Krumina 2025-02-26 09:02:40 -08:00 committed by GitHub
parent 820bdb870a
commit c174d3c795
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -7,6 +7,14 @@
set -eu set -eu
# Ensure that this script runs with the default umask for Linux. In practice,
# this means that files created by this script (such as keyring files) will be
# created with 644 permissions. This ensures that keyrings and other files
# created by this script are readable by installers on systems where the
# umask is set to a more restrictive value.
# See https://github.com/tailscale/tailscale/issues/15133
umask 022
# All the code is wrapped in a main function that gets called at the # All the code is wrapped in a main function that gets called at the
# bottom of the file, so that a truncated partial download doesn't end # bottom of the file, so that a truncated partial download doesn't end
# up executing half a script. # up executing half a script.