From 3d14fb2bef848ad3945ec896f4704c32185c3cbc Mon Sep 17 00:00:00 2001
From: Rob Austein <sra@hactrn.net>
Date: Wed, 29 Jun 2016 14:36:08 -0400
Subject: Tweak ownerships and permissions in firmware tarball.

---
 Makefile                  | 2 +-
 build-firmware-package.py | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/Makefile b/Makefile
index b4ae170..98378ce 100644
--- a/Makefile
+++ b/Makefile
@@ -58,7 +58,7 @@ shadow:
 	./build-shadow-tree.py
 
 ${FIRMWARE_TARBALL}: ${BITSTREAM} $(sort ${ELVES} ${ELVES:.elf=.bin}) ${TAMPER}
-	./build-firmware-package.py $@ $^
+	fakeroot ./build-firmware-package.py $@ $^
 
 bitstream: ${BITSTREAM}
 
diff --git a/build-firmware-package.py b/build-firmware-package.py
index de77243..c44b8bd 100755
--- a/build-firmware-package.py
+++ b/build-firmware-package.py
@@ -25,6 +25,7 @@ for fn in args.firmware:
     tar.add(fn, os.path.basename(fn))
 
 with tempfile.NamedTemporaryFile() as f:
+    os.fchmod(f.fileno(), 0644)
     gpg = subprocess.Popen(("gpg", "--clearsign", "--personal-digest-preferences", "SHA256", "--no-permission-warning"),
                            stdin = subprocess.PIPE, stdout = f)
     json.dump(dict(head = head, time = time, commits = commits, sha256  = sha256), gpg.stdin, indent = 2)
-- 
cgit v1.2.3