From c3b818a0b32632af43f32ed11fb89e69ace24f6f Mon Sep 17 00:00:00 2001
From: Christian Brauner <christian.brauner@ubuntu.com>
Date: Fri, 15 Jun 2018 11:33:34 +0200
Subject: [PATCH] coverity: #1425770

Insecure temporary file

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
---
 src/lxc/utils.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/lxc/utils.c b/src/lxc/utils.c
index 12f2cd449..7aafddaff 100644
--- a/src/lxc/utils.c
+++ b/src/lxc/utils.c
@@ -2411,8 +2411,11 @@ bool lxc_nic_exists(char *nic)
 int lxc_make_tmpfile(char *template, bool rm)
 {
 	int fd, ret;
+	mode_t msk;
 
+	msk = umask(0022);
 	fd = mkstemp(template);
+	umask(msk);
 	if (fd < 0)
 		return -1;