From cca189ef97d5f9fd3f52c75ec6e1ae916916cd08 Mon Sep 17 00:00:00 2001 From: "Nulo (he/him)" <86896666+catdevnull@users.noreply.github.com> Date: Sat, 24 Sep 2022 13:04:14 +0000 Subject: Save files in local storage as umask (#21198) Go creates temporary files as 600, but sometimes we want the group to be able to read them (for example, for another user to back up the storage) This PR applies the umask to the renamed tmp files in local storage. Co-authored-by: wxiaoguang --- modules/storage/local.go | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'modules/storage') diff --git a/modules/storage/local.go b/modules/storage/local.go index 701b0b1a9f..5d5b06b648 100644 --- a/modules/storage/local.go +++ b/modules/storage/local.go @@ -102,6 +102,10 @@ func (l *LocalStorage) Save(path string, r io.Reader, size int64) (int64, error) if err := util.Rename(tmp.Name(), p); err != nil { return 0, err } + // Golang's tmp file (os.CreateTemp) always have 0o600 mode, so we need to change the file to follow the umask (as what Create/MkDir does) + if err := util.ApplyUmask(p, os.ModePerm); err != nil { + return 0, err + } tmpRemoved = true -- cgit v1.2.3