archsetup - Builds a full dev workstation from a bare Arch Linux install.

	Commit message (Collapse)	Author	Age	Files	Lines
*	fix(security): decrypt the cmail password under a tight umask	Craig Jennings	36 hours	1	-0/+79
	gpg writes its output at the process umask (often 0644), so the plaintext mail password was world-readable between the decrypt and the chmod. I extracted decrypt_to_secure, which runs the decrypt in a 0077 umask subshell so the file is 0600 from creation. A fake-gpg test pins that the write runs under the tight umask.