chatmaild: fix umask for doveauth + metadata

missytake · missytake · commit eb3c026eda79 · 2025-02-17T01:17:28.000+01:00
fix #453
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -17,6 +17,9 @@
 - use old crypt lib in python < 3.11
   ([#483](https://github.com/deltachat/chatmail/pull/483))
 
+- chatmaild: set umask to 0700 for doveauth + metadata
+  ([#490](https://github.com/deltachat/chatmail/pull/492))
+
 - remove MTA-STS daemon
   ([#488](https://github.com/deltachat/chatmail/pull/488))
 
diff --git a/cmdeploy/src/cmdeploy/service/chatmail-metadata.service.f b/cmdeploy/src/cmdeploy/service/chatmail-metadata.service.f
@@ -7,6 +7,7 @@
 RestartSec=30
 User=vmail
 RuntimeDirectory=chatmail-metadata
+UMask=0700
 
 [Install]
 WantedBy=multi-user.target
diff --git a/cmdeploy/src/cmdeploy/service/doveauth.service.f b/cmdeploy/src/cmdeploy/service/doveauth.service.f
@@ -7,6 +7,7 @@
 RestartSec=30
 User=vmail
 RuntimeDirectory=doveauth
+UMask=0700
 
 [Install]
 WantedBy=multi-user.target
