devops/build: Set new build products (.buildinfo, .ddeb) read-only.

diff --git a/src/devops/build.scm b/src/devops/build.scm
index 659c0eb908c58cb6ac985c23627b067edb4e2932..d0546a2aafc87144d47061d38bcb25a00ace92f7 100644 (file)
--- a/src/devops/build.scm
+++ b/src/devops/build.scm
@@ -135,6 +135,10 @@ Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA.
     (let ((darch build-debian-architecture))
       (set-file-modes! (string build-dir"/"name"_"vers"_"darch".deb") #o444)
       (set-file-modes! (string build-dir"/"name"_"vers"_"darch".changes") #o444)
+      (let ((f (string build-dir"/"name"_"vers"_"darch".buildinfo")))
+       (if (file-exists? f) (set-file-modes! f #o444)))
+      (let ((f (string build-dir"/"name"-dbgsym_"vers"_"darch".ddeb")))
+       (if (file-exists? f) (set-file-modes! f #o444)))
       (run "rm -rf "pkgdir)
       (run "sudo "project-name"-install "name"_"vers"_"darch".deb"))))