dkim-keys.in (generate_key): Set the permission bits explicitly.

[distorted-dkim] / dkim-keys.in

diff --git a/dkim-keys.in b/dkim-keys.in
index ef38d4de37f62021e9badac1c4af9d5eadefbac7..cf07acca924be5951c7f78858cd5b01147f03094 100755 (executable)
--- a/dkim-keys.in
+++ b/dkim-keys.in
@@ -556,6 +556,7 @@ sub generate_key ($) {
   my $oldmask = umask 0037;
   print "generate new key\n";
   run "openssl", "genrsa", "-out", $file, "3072";
+  chmod 0640, $file;
   umask $oldmask;
 }