daklib/policy.py: REJECT.* files should not be executable

diff --git a/daklib/policy.py b/daklib/policy.py
index 151cc9b6afc38677798542059844de6cefa06e40..41c9c1fe2a1d6e4aa17c688c07f988a436a1f3b8 100644 (file)
--- a/daklib/policy.py
+++ b/daklib/policy.py
@@ -196,7 +196,7 @@ class PolicyQueueUploadHandler(object):
 
         fn = os.path.join(self.upload.policy_queue.path, 'COMMENTS', fn1)
         try:
-            fh = os.open(fn, os.O_CREAT | os.O_EXCL | os.O_WRONLY)
+            fh = os.open(fn, os.O_CREAT | os.O_EXCL | os.O_WRONLY, 0o644)
             os.write(fh, 'NOTOK\n')
             os.write(fh, 'From: {0} <{1}>\n\n'.format(utils.whoami(), cnf['Dinstall::MyAdminAddress']))
             os.write(fh, reason)