Narrowing permission of extracted file

Change-Id: I45fc34c8aa3c3582e4f75aaa590cf6036a1e75a9
Signed-off-by: Sunmin Lee <sunm.lee@samsung.com>

diff --git a/packaging/libtota.spec b/packaging/libtota.spec
index 7699ea2e58b4cf0203d4322d86d068f1307a7c2e..9e8abcd5a591bd27afc973934ac6191fe098a425 100755 (executable)
--- a/packaging/libtota.spec
+++ b/packaging/libtota.spec
@@ -1,6 +1,6 @@
 Name:          libtota
 Summary:       fota update library
-Version:       1.2.5
+Version:       1.2.6
 Release:       0
 Group:         System
 License:       Apache-2.0 and BSD-2-Clause and BSD-3-Clause and PD

diff --git a/ss_engine/fota_tar.c b/ss_engine/fota_tar.c
index 3d073d2eecbcb7a19e5ecaa7ca6b4f68f896b7a0..d5a7a996656ea66ed85532704d03a745127785e2 100755 (executable)
--- a/ss_engine/fota_tar.c
+++ b/ss_engine/fota_tar.c
@@ -1027,7 +1027,7 @@ int fast_tar_extract_file(char *tar, char *item, char *pathname, int size, int o
                close(fd);
                return -1;
        }
-       fd2 = open(pathname, O_CREAT | O_WRONLY, 0777);  // Directory where file is required should be created already.
+       fd2 = open(pathname, O_CREAT | O_WRONLY, S_IRWXU);       // Directory where file is required should be created already.
        if (fd2 < 0) {
                LOG("can't open file(%s).\n", pathname);
                SS_Free(buf);
@@ -1095,7 +1095,7 @@ int tar_extract_file(char *tar, char *item, char *pathname)
                close(fd);
                return -1;
        }
-       fd2 = open(pathname, O_CREAT | O_WRONLY, 0777);  // Directory where file is required should be created already.
+       fd2 = open(pathname, O_CREAT | O_WRONLY, S_IRWXU);       // Directory where file is required should be created already.
        if (fd2 < 0) {
                LOG("can't open file(%s).\n", pathname);
                SS_Free(buf);