From 924712eef1fe86d349635ba666d413632e62519c Mon Sep 17 00:00:00 2001
From: Eelco Dolstra <edolstra@gmail.com>
Date: Wed, 30 Sep 2020 17:48:49 +0200
Subject: [PATCH] Installer: Set a known umask

Fixes #1560, #2377.
---
 scripts/install-nix-from-closure.sh | 2 ++
 scripts/install.in                  | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/scripts/install-nix-from-closure.sh b/scripts/install-nix-from-closure.sh
index 6efd8af18..14fb91534 100644
--- a/scripts/install-nix-from-closure.sh
+++ b/scripts/install-nix-from-closure.sh
@@ -2,6 +2,8 @@
 
 set -e
 
+umask 0022
+
 dest="/nix"
 self="$(dirname "$0")"
 nix="@nix@"
diff --git a/scripts/install.in b/scripts/install.in
index 1d26c4ff0..39fae37e3 100644
--- a/scripts/install.in
+++ b/scripts/install.in
@@ -10,6 +10,8 @@ oops() {
     exit 1
 }
 
+umask 0022
+
 tmpDir="$(mktemp -d -t nix-binary-tarball-unpack.XXXXXXXXXX || \
           oops "Can't create temporary directory for downloading the Nix binary tarball")"
 cleanup() {