Force umask to 077 (instead of 000) during the edit phase, to get

secure permissions in case the user attempts to save something to
a file of his own.

Move umask stuff out of pw_init() into main() for better visibility
of overall umask tweaking logic.

PR:		misc/11797

diff --git a/libutil/pw_util.c b/libutil/pw_util.c
index cdfcc4d28a04ef9055b45483525d516dc5af62d0..5930342229b315dc11723f7c38a80abd6a5b9288 100644 (file)
--- a/libutil/pw_util.c
+++ b/libutil/pw_util.c
@@ -36,7 +36,7 @@
 static const char sccsid[] = "@(#)pw_util.c    8.3 (Berkeley) 4/2/94";
 #endif
 static const char rcsid[] =
-       "$Id: pw_util.c,v 1.13 1998/12/13 01:39:32 dillon Exp $";
+       "$Id: pw_util.c,v 1.14 1999/06/26 07:16:38 sheldonh Exp $";
 #endif /* not lint */
 
 /*
@@ -103,9 +103,6 @@ pw_init()
        (void)signal(SIGQUIT, SIG_IGN);
        (void)signal(SIGTERM, SIG_IGN);
        (void)signal(SIGCONT, pw_cont);
-
-       /* Create with exact permissions. */
-       (void)umask(0);
 }
 
 int