* Set umask to 0022 on startup.

scripts/nix-pull-prebuilts

@@ -7,6 +7,8 @@ my $tmpfile = "$prefix/var/nix/prebuilts.tmp";
 
 my $conffile = "$etcdir/prebuilts.conf";
 
+umask 0022;
+
 sub register {
     my $fn = shift;
     my $url = shift;

scripts/nix-push-prebuilts

@@ -5,6 +5,8 @@ my $etcdir = "$prefix/etc/nix";
 my $exportdir = "$prefix/var/nix/prebuilts/exports";
 my $knowns = "$prefix/var/nix/known-prebuilts";
 
+umask 0022;
+
 # For performance, put the known hashes in an associative array.
 my %knowns = ();
 open KNOWNS, "<$knowns";

src/fix.cc

@@ -301,6 +301,8 @@ void printUsage()
 /* Parse the command-line arguments, call the right operation. */
 void run(Strings::iterator argCur, Strings::iterator argEnd)
 {
+    umask(0022);
+
     Strings extraArgs;
     enum { cmdUnknown, cmdInstantiate } command = cmdUnknown;