summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorNicolas Le Manchet <nicolas.le-manchet@ovh.pl>2015-02-11 14:15:38 +0100
committerJames Cammarata <jimi@sngx.net>2015-02-17 14:30:57 -0600
commitb9f2ee78c187d4ba54f75ec9392f5f93cc1c255b (patch)
tree8b570dc0e7d6499daabcc6078e352b85ef8d2eb0
parentab35504b51bf283f191ba7cdafc1408710455e21 (diff)
downloadansible-b9f2ee78c187d4ba54f75ec9392f5f93cc1c255b.tar.gz
Set proper permissions for ansible-vault view
-rw-r--r--lib/ansible/utils/vault.py2
1 files changed, 2 insertions, 0 deletions
diff --git a/lib/ansible/utils/vault.py b/lib/ansible/utils/vault.py
index 66f18d5c9b..ce3baa5153 100644
--- a/lib/ansible/utils/vault.py
+++ b/lib/ansible/utils/vault.py
@@ -278,8 +278,10 @@ class VaultEditor(object):
tmpdata = self.read_data(self.filename)
this_vault = VaultLib(self.password)
dec_data = this_vault.decrypt(tmpdata)
+ old_umask = os.umask(0o077)
_, tmp_path = tempfile.mkstemp()
self.write_data(dec_data, tmp_path)
+ os.umask(old_umask)
# drop the user into pager on the tmp file
call(self._pager_shell_command(tmp_path))