launchpad-reviewers team mailing list archive

[Simone Pelosi <mp+464915@xxxxxxxxxxxxxxxxxx>]

Simone Pelosi has proposed merging ~pelpsi/launchpad-buildd:fix-cerf-file-permissions into launchpad-buildd:master.

Commit message:
Give to the cert file the right permissions

Requested reviews:
  Launchpad code reviewers (launchpad-reviewers)

For more details, see:
https://code.launchpad.net/~pelpsi/launchpad-buildd/+git/launchpad-buildd/+merge/464915
-- 
Your team Launchpad code reviewers is requested to review the proposed merge of ~pelpsi/launchpad-buildd:fix-cerf-file-permissions into launchpad-buildd:master.

diff --git a/lpbuildd/target/build_snap.py b/lpbuildd/target/build_snap.py
index f29e3d5..5adbb76 100644
--- a/lpbuildd/target/build_snap.py
+++ b/lpbuildd/target/build_snap.py
@@ -125,6 +125,7 @@ class BuildSnap(
             "/usr/local/share/ca-certificates/local-ca.crt", mode="w"
         ) as local_ca_cert:
             local_ca_cert.write(self.args.fetch_service_mitm_certificate)
+            os.fchmod(local_ca_cert.fileno(), 0o644)
         self.backend.run(["update-ca-certificates"])
         # XXX jugmac00 2024-04-17: We might need to restart snapd
         # so the new certificate will be used