enforce change permissions _after_ writing file

We don't want files to be globally readable/writable
when writing is in-progress.

1 files changed, 1 insertions, 0 deletions

diff --git a/dev.c b/dev.c
index 1c3641a..f7727a9 100644
--- a/dev.c
+++ b/dev.c
@@ -82,6 +82,7 @@ int mog_dev_mkusage(const struct mog_dev *dev, struct mog_svc *svc)
         if (fd < 0) goto out;
         if (fstatvfs(fd, &v) < 0) goto out;
         if (emit_usage(dev, svc, fd, &v) < 0) goto out;
+        if (fchmod(fd, svc->put_perms) < 0) goto out;
 
         /* skip rename on EIO or EBADF if close() fails */
         fd = close(fd);