[PATCH 1/1] services: urandom-seed: Set umask to 077 while shutting down.

[Leo Famulari]

* gnu/services/base.scm (urandom-seed-shepherd-service): Call 'umask'.
---
 gnu/services/base.scm | 1 +
 1 file changed, 1 insertion(+)

diff --git a/gnu/services/base.scm b/gnu/services/base.scm
index a45f219..8ed40a4 100644
--- a/gnu/services/base.scm
+++ b/gnu/services/base.scm
@@ -461,6 +461,7 @@ stopped before 'kill' is called."
                      (call-with-input-file "/dev/urandom"
                        (lambda (urandom)
                          (get-bytevector-n! urandom buf 0 512)
+                         (umask #o077)
                          (call-with-output-file #$%random-seed-file
                            (lambda (seed)
                              (put-bytevector seed buf)))
-- 
2.8.3