From 4a556dcab19e66e30eac65226ae5ede6de682a8c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Marek=20Marczykowski-G=C3=B3recki?=
 <marmarek@invisiblethingslab.com>
Date: Sun, 13 Dec 2015 02:07:01 +0100
Subject: [PATCH] dom0-updates: ensure proper permissions on "updates pending"
 flag

QubesOS/qubes-issues#1511
---
 dom0-updates/qubes-dom0-updates.cron | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/dom0-updates/qubes-dom0-updates.cron b/dom0-updates/qubes-dom0-updates.cron
index 3c09d4a..c6104da 100755
--- a/dom0-updates/qubes-dom0-updates.cron
+++ b/dom0-updates/qubes-dom0-updates.cron
@@ -18,4 +18,6 @@ if [ "$RETCODE" -ne 100 ]; then
 fi
 
 # Touch stat file for qubes-manager
-touch $UPDATES_STAT_FILE
+touch "$UPDATES_STAT_FILE"
+chgrp qubes "$UPDATES_STAT_FILE"
+chmod g+w "$UPDATES_STAT_FILE"