From 3c226e26ec018669ec60825c41cbee573f67dbdd Mon Sep 17 00:00:00 2001
From: mirefly42 <143206683+mirefly42@users.noreply.github.com>
Date: Fri, 2 May 2025 15:43:30 +0700
Subject: [PATCH] Prevent busybox-init service from generating a config
 readable by everyone

---
 contrib/busybox-init/S42yggdrasil | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/contrib/busybox-init/S42yggdrasil b/contrib/busybox-init/S42yggdrasil
index 862efc25..04dc791d 100755
--- a/contrib/busybox-init/S42yggdrasil
+++ b/contrib/busybox-init/S42yggdrasil
@@ -3,7 +3,7 @@
 CONFFILE="/etc/yggdrasil.conf"
 
 genconf() {
-	/usr/bin/yggdrasil -genconf > "$1"
+	(umask 037 && /usr/bin/yggdrasil -genconf > "$1")
 	return $?
 }