Change default umask to 0026

Change-Id: Iacc9cda2282e99d3dc088c99d06dc85737b9be46

diff --git a/src/dcm-daemon/main.cpp b/src/dcm-daemon/main.cpp
index b43b12afdf5f641453b67a2959cc0aa75c65d2e8..fab86c19f9717b7805d08589f0dcf19211ebb168 100644 (file)
--- a/src/dcm-daemon/main.cpp
+++ b/src/dcm-daemon/main.cpp
@@ -51,9 +51,6 @@ boost::asio::local::stream_protocol::acceptor socket_acceptor(boost::asio::io_se
 int main()
 {
        try {
-               /* Change the file mode mask */
-               (void)umask(0);
-
                /* Use root directory as working directory */
                int error = chdir("/");
                (void)error;

diff --git a/systemd/device-certificate-manager.service.in b/systemd/device-certificate-manager.service.in
index 59a8a378b14e65af5b84f70b535b42672b16a9c0..23a696552e9274922d4fd85e83fc33179f1d1333 100644 (file)
--- a/systemd/device-certificate-manager.service.in
+++ b/systemd/device-certificate-manager.service.in
@@ -5,6 +5,7 @@ Description=Start the Device Certificate Manager
 User=@USER_NAME@
 Group=@GROUP_NAME@
 SmackProcessLabel=@SMACK_DOMAIN_NAME@
+UMask=0026
 Type=notify
 KillMode=process
 TimeoutStopSec=3