mjit.c: set umask

* mjit.c (start_process): set umask so other users cannot access
  generated files.

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@62335 b2dd03c8-39d4-4d8f-98ff-823fe69b080e

1 files changed, 1 insertions, 0 deletions

diff --git a/mjit.c b/mjit.c
index 660c238b44..4b8ea2e08d 100644
--- a/mjit.c
+++ b/mjit.c
@@ -336,6 +336,7 @@ start_process(const char *path, char *const *argv)
         int dev_null = rb_cloexec_open(ruby_null_device, O_WRONLY, 0);
 
         if ((pid = vfork()) == 0) {
+            umask(0077);
             if (mjit_opts.verbose == 0) {
                 /* CC can be started in a thread using a file which has been
                    already removed while MJIT is finishing.  Discard the