From bfe6116d27b1e8d48abcd91f3a503306d7b75812 Mon Sep 17 00:00:00 2001
From: Fredrik Tolf <fredrik@dolda2000.com>
Date: Tue, 9 Nov 2021 20:37:23 +0100
Subject: [PATCH] acmecert: Set a secure umask when writing account file.

---
 acmecert | 1 +
 1 file changed, 1 insertion(+)

diff --git a/acmecert b/acmecert
index 076bbda..6136eaa 100755
--- a/acmecert
+++ b/acmecert
@@ -309,6 +309,7 @@ commands = {}
 def cmd_reg(args):
     "usage: acmecert reg [OUTPUT-FILE]"
     acct = register()
+    os.umask(0o077)
     with maybeopen(args[1] if len(args) > 1 else "-", "w") as fp:
         acct.write(fp)
 commands["reg"] = cmd_reg
-- 
2.11.0