firstboot: change /etc/shadow access mode to 000

[elogind.git] / src / firstboot / firstboot.c

diff --git a/src/firstboot/firstboot.c b/src/firstboot/firstboot.c
index 56893d0e37031f5db0670b561fdbf11524d3cace..57173a56695b4905f73099af33916738fb4d6e0b 100644 (file)
--- a/src/firstboot/firstboot.c
+++ b/src/firstboot/firstboot.c
@@ -531,7 +531,8 @@ static int write_root_shadow(const char *path, const struct spwd *p) {
         assert(p);
 
         mkdir_parents(path, 0755);
-        f = fopen(path, "wex");
+        RUN_WITH_UMASK(0777)
+                f = fopen(path, "wex");
         if (!f)
                 return -errno;