From faf59800435a50c231c568b18803c8d1c37900d1 Mon Sep 17 00:00:00 2001
From: Brian Stinson <brian@bstinson.com>
Date: Oct 11 2016 20:24:26 +0000
Subject: set the mode of the user certificate each time one is generated fixes: 12011


---

diff --git a/SOURCES/centos-cert b/SOURCES/centos-cert
index c414b9d..9cbf746 100644
--- a/SOURCES/centos-cert
+++ b/SOURCES/centos-cert
@@ -74,6 +74,8 @@ def download_cert(username, password, topurl=None, servercacert=None, uploadcace
     os.symlink(os.path.expanduser(defaults.SERVER_CA_CERT_FILE),
                os.path.expanduser(defaults.UPLOAD_CA_CERT_FILE))
 
+    os.chmod(os.path.expanduser(defaults.USER_CERT_FILE), 0o600)
+
 
 def main(opts):
 
diff --git a/SPECS/centos-packager.spec b/SPECS/centos-packager.spec
index 4ae2950..963873f 100644
--- a/SPECS/centos-packager.spec
+++ b/SPECS/centos-packager.spec
@@ -1,5 +1,5 @@
 Name:           centos-packager
-Version:        0.5.1
+Version:        0.5.3
 Release:        1%{?dist}
 Summary:        Tools and files necessary for building CentOS packages
 Group:          Applications/Productivity
@@ -44,6 +44,9 @@ ln -sf %{_bindir}/koji %{buildroot}%{_bindir}/cbs
 %{_bindir}/centos-cert
 
 %changelog
+* Tue Oct 11 2016 brian@bstinson.com 0.5.3-1
+- Rebuild to fix #12011
+
 * Tue Nov 10 2015 brian@bstinson.com 0.5.2-1
 - Fix a typo pointing to the ca-bundle in the cbs koji profile