mirror of
https://github.com/storytold/photocraft.git
synced 2026-11-12 21:23:02 +00:00
Dylan M. Taylor
f6741eff4d
import-cert.sh wrote the decoded .p12 to a fixed name in the temp directory. If another account had created that file first, the shell redirection truncated and reused it, keeping its owner and mode, and the signing key was readable to that account. Create it with mktemp.