mktemp as root, so SELinux allows root to write to the file

sysrich · Nov 6, 2024 · 2b90a9d · 2b90a9d
1 parent ed5a627
commit 2b90a9d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/usr/lib/tik/lib/tik-functions b/usr/lib/tik/lib/tik-functions
@@ -336,7 +336,7 @@ reread_partitiontable() {
 
 create_keyfile() {
     # Even if there's no partitions using encryption, systemd-repart will need a key-file defined for the --key-file parameter.
-    tik_keyfile=$(mktemp /tmp/tik.XXXXXXXXXX)
+    tik_keyfile=$(prun mktemp /tmp/tik.XXXXXXXXXX)
     log "[create_keyfile] Creating keyfile ${tik_keyfile}"
     prun /usr/bin/dd bs=512 count=4 if=/dev/urandom of=${tik_keyfile} iflag=fullblock
     prun /usr/bin/chmod 400 ${tik_keyfile}