Tweak ownerships and permissions in firmware tarball.

2 files changed, 2 insertions, 1 deletions

diff --git a/Makefile b/Makefile
index b4ae170..98378ce 100644
--- a/Makefile
+++ b/Makefile
@@ -58,7 +58,7 @@ shadow:
 	./build-shadow-tree.py
 
 ${FIRMWARE_TARBALL}: ${BITSTREAM} $(sort ${ELVES} ${ELVES:.elf=.bin}) ${TAMPER}
-	./build-firmware-package.py $@ $^
+	fakeroot ./build-firmware-package.py $@ $^
 
 bitstream: ${BITSTREAM}
 
diff --git a/build-firmware-package.py b/build-firmware-package.py
index de77243..c44b8bd 100755
--- a/build-firmware-package.py
+++ b/build-firmware-package.py
@@ -25,6 +25,7 @@ for fn in args.firmware:
     tar.add(fn, os.path.basename(fn))
 
 with tempfile.NamedTemporaryFile() as f:
+    os.fchmod(f.fileno(), 0644)
     gpg = subprocess.Popen(("gpg", "--clearsign", "--personal-digest-preferences", "SHA256", "--no-permission-warning"),
                            stdin = subprocess.PIPE, stdout = f)
     json.dump(dict(head = head, time = time, commits = commits, sha256  = sha256), gpg.stdin, indent = 2)