[dak/master] When rejecting packages, make .changes files world readable (Closes: #156876)

[Luca Falavigna <dktrkranz@debian.org>]

Signed-off-by: Luca Falavigna <dktrkranz@debian.org>
---
 daklib/queue.py |    4 ++++
 1 files changed, 4 insertions(+), 0 deletions(-)

diff --git a/daklib/queue.py b/daklib/queue.py
index 9d1e386..85c85f9 100755
--- a/daklib/queue.py
+++ b/daklib/queue.py
@@ -2425,11 +2425,15 @@ distribution."""
 
         reason_filename = self.pkg.changes_file[:-8] + ".reason"
         reason_filename = os.path.join(cnf["Dir::Reject"], reason_filename)
+        changesfile = os.path.join(cnf["Dir::Reject"], self.pkg.changes_file)
 
         # Move all the files into the reject directory
         reject_files = self.pkg.files.keys() + [self.pkg.changes_file]
         self.force_reject(reject_files)
 
+        # Change permissions of the .changes file to be world readable
+        os.chmod(changesfile, os.stat(changesfile).st_mode | stat.S_IROTH)
+
         # If we fail here someone is probably trying to exploit the race
         # so let's just raise an exception ...
         if os.path.exists(reason_filename):
-- 
1.7.2.5