* package.el (package-import-keyring): Create gnupg directory private.

See bug#17625#155.

diff --git a/lisp/ChangeLog b/lisp/ChangeLog
index 0a0fb21b1e5ec147fe3c17c3766548727dd7f2fc..db08b101dc50e5355ff02e362da6696a0b02150f 100644 (file)
--- a/lisp/ChangeLog
+++ b/lisp/ChangeLog
@@ -1,3 +1,8 @@
+2014-10-01  Glenn Morris  <rgm@gnu.org>
+
+       * emacs-lisp/package.el (package-import-keyring):
+       Create gnupg directory private.  (Bug#17625#155)
+
 2014-10-01  Stefan Monnier  <monnier@iro.umontreal.ca>
 
        * progmodes/python.el (python-shell-completion-get-completions):

diff --git a/lisp/emacs-lisp/package.el b/lisp/emacs-lisp/package.el
index 958e9d29ebd4918c26496cc98019a7dc00b4b4c9..823ba365e62e0124edbe9f1a7badc3ca2cffd1da 100644 (file)
--- a/lisp/emacs-lisp/package.el
+++ b/lisp/emacs-lisp/package.el
@@ -1298,7 +1298,13 @@ similar to an entry in `package-alist'.  Save the cached copy to
   (setq file (expand-file-name file))
   (let ((context (epg-make-context 'OpenPGP))
        (homedir (expand-file-name "gnupg" package-user-dir)))
-    (make-directory homedir t)
+    ;; FIXME Use `with-file-modes' when merged to trunk.
+    (let ((umask (default-file-modes)))
+      (unwind-protect
+          (progn
+            (set-default-file-modes 448)
+            (make-directory homedir t))
+        (set-default-file-modes umask)))
     (epg-context-set-home-directory context homedir)
     (message "Importing %s..." (file-name-nondirectory file))
     (epg-import-keys-from-file context file)