umask in import script

diff --git a/import.sh b/import.sh
index 1bfcbe09aa035598bb75a847940528dd5e245991..06ef009bc9e095bf6fb343e5e3972c34aff8142b 100755 (executable)
--- a/import.sh
+++ b/import.sh
@@ -4,6 +4,8 @@ set -e
 set -u
 set -o pipefail
 
+umask 077 # paranoid umask, we're creating private keys
+
 SCRIPTDIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
 BASEDIR="${SCRIPTDIR}"
 LETSENCRYPT="/etc/letsencrypt"