commit a6146f217dbc65bd7f64cfa86bd1a85e0fc24315
author June Tate-Gans <jtgans@google.com> Mon Jun 01 12:22:27 2020 -0400
committer June Tate-Gans <jtgans@google.com> Mon Jun 01 12:22:27 2020 -0400
tree 53d3a6316e8aecc8d754ad5bc948b5ddbe924d0d
parent 301b13e4831da2ddf0794045141e96ddecd28e8c

Permissions checks and fixes.

Change-Id: I396a2d6c5640060393a0f470d27daf79e5cd4336

cicd/pipelines/tasks/task_publish_unstable.jenkins

diff --git a/cicd/pipelines/tasks/task_publish_unstable.jenkins b/cicd/pipelines/tasks/task_publish_unstable.jenkins
index 03eda7a..d9549f1 100644
--- a/cicd/pipelines/tasks/task_publish_unstable.jenkins
+++ b/cicd/pipelines/tasks/task_publish_unstable.jenkins
@@ -59,6 +59,9 @@
                     sh """
                        install -d -m 700 -o root -g root /var/lib/aptly/.gnupg
                        tar -C /var/lib/aptly/.gnupg -zxf /var/lib/aptly/keyring/release-keyring.tar.gz
+                       chown -R root:root /var/lib/aptly/.gnupg
+                       find /var/lib/aptly/.gnupg -type d -exec chmod 700 '{}' ';'
+                       find /var/lib/aptly/.gnupg -type f -exec chmod 600 '{}' ';'
 
                        mkdir -p /var/lib/aptly/publishes/unstable
                        aptly snapshot merge core-full-unstable-${stamp} ${debianMirrorSnapshotName} ${coreSnapshotName}