From eebee5f6f98a83220fe07bb05129fd2c932eab85 Mon Sep 17 00:00:00 2001
From: mirefly42 <143206683+mirefly42@users.noreply.github.com>
Date: Fri, 2 May 2025 17:16:27 +0700
Subject: [PATCH] Prevent contrib/macos/create-pkg.sh script from generating a
 config readable by everyone

---
 contrib/macos/create-pkg.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/contrib/macos/create-pkg.sh b/contrib/macos/create-pkg.sh
index 773f01ee..9d063d65 100755
--- a/contrib/macos/create-pkg.sh
+++ b/contrib/macos/create-pkg.sh
@@ -55,7 +55,7 @@ then
   echo "Normalising /etc/yggdrasil.conf"
   /usr/local/bin/yggdrasil -useconffile /Library/Preferences/Yggdrasil/yggdrasil.conf.`date +%Y%m%d` -normaliseconf > /etc/yggdrasil.conf
 else
-  /usr/local/bin/yggdrasil -genconf > /etc/yggdrasil.conf
+  (umask 037 && /usr/local/bin/yggdrasil -genconf > /etc/yggdrasil.conf)
 fi
 
 # Unload existing Yggdrasil launchd service, if possible