make sure only the appstore user can read downloaded releases

nextcloud · Jun 23, 2016 · 1d93a3f · 1d93a3f
1 parent 0372d3a
commit 1d93a3f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/nextcloudappstore/core/api/v1/release/downloader.py b/nextcloudappstore/core/api/v1/release/downloader.py
@@ -46,7 +46,7 @@ def get_archive(self, url: str, target_directory: str, timeout: int = 60,
         if target_directory is None:
             file = tempfile.NamedTemporaryFile(delete=False)
         else:
-            os.makedirs(target_directory, mode=0o755, exist_ok=True)
+            os.makedirs(target_directory, mode=0o700, exist_ok=True)
             file = tempfile.NamedTemporaryFile(dir=target_directory,
                                                delete=False)