[Cryptech-Commits] [user/sra/alpha-releng/omnibus] 01/03: Tweak ownerships and permissions in firmware tarball.

[git at cryptech.is]

This is an automated email from the git hooks/post-receive script.

sra at hactrn.net pushed a commit to branch master
in repository user/sra/alpha-releng/omnibus.

commit 3d14fb2bef848ad3945ec896f4704c32185c3cbc
Author: Rob Austein <sra at hactrn.net>
AuthorDate: Wed Jun 29 14:36:08 2016 -0400

    Tweak ownerships and permissions in firmware tarball.
---
 Makefile                  | 2 +-
 build-firmware-package.py | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/Makefile b/Makefile
index b4ae170..98378ce 100644
--- a/Makefile
+++ b/Makefile
@@ -58,7 +58,7 @@ shadow:
 	./build-shadow-tree.py
 
 ${FIRMWARE_TARBALL}: ${BITSTREAM} $(sort ${ELVES} ${ELVES:.elf=.bin}) ${TAMPER}
-	./build-firmware-package.py $@ $^
+	fakeroot ./build-firmware-package.py $@ $^
 
 bitstream: ${BITSTREAM}
 
diff --git a/build-firmware-package.py b/build-firmware-package.py
index de77243..c44b8bd 100755
--- a/build-firmware-package.py
+++ b/build-firmware-package.py
@@ -25,6 +25,7 @@ for fn in args.firmware:
     tar.add(fn, os.path.basename(fn))
 
 with tempfile.NamedTemporaryFile() as f:
+    os.fchmod(f.fileno(), 0644)
     gpg = subprocess.Popen(("gpg", "--clearsign", "--personal-digest-preferences", "SHA256", "--no-permission-warning"),
                            stdin = subprocess.PIPE, stdout = f)
     json.dump(dict(head = head, time = time, commits = commits, sha256  = sha256), gpg.stdin, indent = 2)