Set appropriate umask for .gnupg creation.

1 files changed, 2 insertions, 0 deletions

diff --git a/lib/Kiki.hs b/lib/Kiki.hs
index 38064ff..bdf8932 100644
--- a/lib/Kiki.hs
+++ b/lib/Kiki.hs
@@ -117,6 +117,7 @@ importAndRefresh root cmn = do
     (home,secring,pubring,mbwk) <- unconditionally $ getHomeDir homespec
     osHomeDir <- if bUnprivileged then getHomeDirectory else return "/root"
 
+    old_umask <- setFileCreationMask(0o077);
     -- Generate secring.gpg if it does not exist...
     gotsec <- doesFileExist secring
     when (not gotsec) $ do
@@ -145,6 +146,7 @@ importAndRefresh root cmn = do
                         HomePub
                         ( encode $ Message [] )
 
+    setFileCreationMask(old_umask);
     -- Old paths..
     --
     -- Private