DKIM: more care over untrustworthy data during verify

[users/jgh/exim.git] / release-process / scripts / sign_exim_packages

diff --git a/release-process/scripts/sign_exim_packages b/release-process/scripts/sign_exim_packages
index a1d6282bb223d30be7d361d6c5b09ff008cf6f28..4ed614f196cd5e7bbbdee30fb8e8658f5bb9d4d4 100755 (executable)
--- a/release-process/scripts/sign_exim_packages
+++ b/release-process/scripts/sign_exim_packages
@@ -10,6 +10,8 @@ dir=${1:?start directory}
 
 : ${EXIM_KEY:=nigel@exim.org}
 
+umask 022
+
 find "$dir" \
     -type f -name '*.tar.*' \
     -exec gpg  --local-user ${EXIM_KEY} --detach-sig --armor {} \;