Restrict permissions on Postgres backups files. Resolves sovereign#322.

jhauris · Nov 11, 2014 · ca5c3a0 · ca5c3a0
1 parent 65bd78d
commit ca5c3a0
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/roles/tarsnap/files/tarsnap.sh b/roles/tarsnap/files/tarsnap.sh
@@ -58,6 +58,7 @@ fi
 cd /home/
 
 # Dump PostgreSQL to file
+umask 077
 sudo -u postgres pg_dumpall -c | gzip > /decrypted/postgresql-backup.sql.gz
 
 # Do backups