fix(updater): set tmp folder permissions (#4311)

tauri-apps · Jun 13, 2022 · b77877f · b77877f
1 parent 123d46a
commit b77877f
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/.changes/updater-tmp-folder-permission.md b/.changes/updater-tmp-folder-permission.md
@@ -0,0 +1,5 @@
+---
+"tauri": patch
+---
+
+Set permission to `0o700` for the tmp folder used to move the current AppImage on the updater process.
diff --git a/core/tauri/src/updater/core.rs b/core/tauri/src/updater/core.rs
@@ -641,9 +641,13 @@ impl<R: Runtime> Update<R> {
 #[cfg(feature = "updater")]
 #[cfg(target_os = "linux")]
 fn copy_files_and_run<R: Read + Seek>(archive_buffer: R, extract_path: &Path) -> Result {
+  use std::os::unix::fs::PermissionsExt;
   let tmp_dir = tempfile::Builder::new()
     .prefix("tauri_current_app")
     .tempdir()?;
+  let mut perms = std::fs::metadata(tmp_dir.path())?.permissions();
+  perms.set_mode(0o700);
+  std::fs::set_permissions(tmp_dir.path(), perms)?;
 
   let tmp_app_image = &tmp_dir.path().join("current_app.AppImage");