Create tmpfile with mode 0600

CHANGES.md

@@ -29,6 +29,7 @@
 - Format paths in `boot.class.path` and `fake.class.path` system properties
   with correct, platform-specific paths [#488][488].
 - Eliminate runtime reflection in `boot.core/deftask` macro [#490][490].
+- Create bootscript tmpfile with mode `0600` instead of `0664`.
 
 #### Tasks
 

boot/pod/src/boot/file.clj

@@ -8,9 +8,9 @@
   (:import
    [java.net URI]
    [java.io File]
-   [java.nio.file.attribute FileAttribute]
+   [java.lang.management ManagementFactory]
    [java.nio.file Files StandardCopyOption FileVisitOption]
-   [java.lang.management ManagementFactory])
+   [java.nio.file.attribute FileAttribute PosixFilePermissions])
   (:refer-clojure :exclude [sync name file-seq]))
 
 (set! *warn-on-reflection* true)
@@ -21,6 +21,11 @@
 (def ^:dynamic *sync-delete* true)
 (def ^:dynamic *hard-link*   true)
 
+(def tmpfile-permissions
+  (into-array FileAttribute
+              [(PosixFilePermissions/asFileAttribute
+                 (PosixFilePermissions/fromString "rw-------"))]))
+
 (defn file? [f] (when (try (.isFile (io/file f)) (catch Throwable _)) f))
 (defn dir? [f] (when (try (.isDirectory (io/file f)) (catch Throwable _)) f))
 (defn exists? [f] (when (try (.exists (io/file f)) (catch Throwable _)) f))
@@ -128,9 +133,11 @@
 
 (defn ^File tmpfile
   ([prefix postfix]
-   (doto (java.io.File/createTempFile prefix postfix) .deleteOnExit))
-  ([prefix postfix dir]
-   (doto (java.io.File/createTempFile prefix postfix dir) .deleteOnExit)))
+   (let [path (Files/createTempFile prefix postfix tmpfile-permissions)]
+     (doto (.toFile path) (.deleteOnExit))))
+  ([prefix postfix ^File dir]
+   (let [path (Files/createTempFile (.toPath dir) prefix postfix tmpfile-permissions)]
+     (doto (.toFile path) (.deleteOnExit)))))
 
 (defn ^File tmpdir
   ([prefix]