From 040aa77664187dd0149b808e69a309db6cde95d7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?IOhannes=20m=20zm=C3=B6lnig?= <zmoelnig@iem.at>
Date: Mon, 23 Oct 2023 08:21:38 +0200
Subject: [PATCH] Fix permission of generated image to to 644

- everybody should probably be able to read the file
- **not** everybody (esp. not "others") should be able to write the generated
  file
- nobody needs to be able to execute the file

Closes: https://github.com/guysoft/CustomPiOS/issues/211
---
 src/custompios | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/custompios b/src/custompios
index 0b31022..b97da75 100755
--- a/src/custompios
+++ b/src/custompios
@@ -204,7 +204,7 @@ pushd $BASE_WORKSPACE
   
   # unmount first boot, then root partition
   unmount_image $BASE_MOUNT_PATH
-  chmod 777 $BASE_IMG_PATH
+  chmod 644 $BASE_IMG_PATH
 
   if [ -n "$BASE_IMAGE_RESIZEROOT" ]
   then