From a74b69ce08e5d79ba9629a0764ec103007fc511b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Marek=20Marczykowski-G=C3=B3recki?=
 <marmarek@invisiblethingslab.com>
Date: Mon, 30 Jun 2014 16:16:59 +0200
Subject: [PATCH] dom0-updates: ensure that metadata are available to normal
 user

---
 dom0-updates/qubes-receive-updates | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/dom0-updates/qubes-receive-updates b/dom0-updates/qubes-receive-updates
index f9dbba4..d402941 100755
--- a/dom0-updates/qubes-receive-updates
+++ b/dom0-updates/qubes-receive-updates
@@ -97,6 +97,7 @@ def handle_dom0updates(updatevm):
     if comps_file:
         createrepo_cmd += ["-g", comps_file]
     createrepo_cmd += ["-q", updates_dir]
+    old_umask = os.umask(002)
     subprocess.check_call(createrepo_cmd)
     os.chown(updates_repodata_dir, -1, qubes_gid)
     os.chmod(updates_repodata_dir, 0775)
@@ -109,6 +110,7 @@ def handle_dom0updates(updatevm):
         null.close()
     except:
         pass
+    os.umask(old_umask)
     exit(0)
 
 def main():