set 0440 permissions to tmp file before copying it to sudoers

1 files changed, 1 insertions, 0 deletions

diff --git a/iurt2 b/iurt2
index 3a8dc3e..e41fef2 100755
--- a/iurt2
+++ b/iurt2
@@ -1452,6 +1452,7 @@ root    ALL=(ALL) ALL
 $user   ALL=(ALL) NOPASSWD:RPM
 );
     close $f;
+    chmod 0440, $tmpfile;
 
     plog("adding sudo for /bin/rpm, /usr/sbin/urpmi and /usr/sbin/urpme");
     my $ret = sudo($run, $config, '--cp', $tmpfile, $file);