log: set a more restrictive umask for new files

Addresses: https://github.com/dbus-fuzzer/dfuzzer/security/code-scanning/2
dbus-fuzzer · Apr 10, 2023 · ae2d98b · ae2d98b
1 parent 2810e5e
commit ae2d98b
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/src/log.c b/src/log.c
@@ -1,4 +1,5 @@
 #include <stdio.h>
+#include <sys/stat.h>
 
 #include "log.h"
 
@@ -21,6 +22,8 @@ int df_log_open_log_file(const char *file_name)
 {
         g_assert(!log_file);
 
+        (void) umask(0022);
+
         log_file = fopen(file_name, "a+");
         if (!log_file)
                 return df_fail_ret(-1, "Failed to open file %s: %m\n", file_name);