02/09: activation: Make home directories #o700 by default.

[guix-commits]

civodul pushed a commit to branch master
in repository guix.

commit 8bb76f3d44c1f5ffec8011819494db306a51d801
Author: Ludovic Courtès <address@hidden>
Date:   Mon Mar 4 13:32:36 2019 +0100

    activation: Make home directories #o700 by default.
    
    Until now they'd be #o755, except for /root, which is treated specially
    in (gnu build install).
    
    * gnu/build/activation.scm (activate-user-home): Chmod HOME to #o700.
    Remove redundant 'unless system?'.
---
 gnu/build/activation.scm | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/gnu/build/activation.scm b/gnu/build/activation.scm
index 0e77677..d516f5b 100644
--- a/gnu/build/activation.scm
+++ b/gnu/build/activation.scm
@@ -298,9 +298,9 @@ they already exist."
                 (gid (passwd:gid pw)))
            (mkdir-p home)
            (chown home uid gid)
-           (unless system?
-             (copy-account-skeletons home
-                                     #:uid uid #:gid gid)))))))
+           (chmod home #o700)
+           (copy-account-skeletons home
+                                   #:uid uid #:gid gid))))))
 
   (for-each ensure-user-home users))