From: Matt Birkholz <matt@birchwood-abbey.net>
Date: Thu, 25 Jan 2018 16:09:27 +0000 (-0700)
Subject: devops/build: Set new build products (.buildinfo, .ddeb) read-only.
X-Git-Tag: mit-scheme-pucked-devops-0.5~11
X-Git-Url: https://birchwood-abbey.net/git?a=commitdiff_plain;h=292475feb04c74825057106987ff9ce0b4a10f67;p=mit-scheme.git

devops/build: Set new build products (.buildinfo, .ddeb) read-only.
---

diff --git a/src/devops/build.scm b/src/devops/build.scm
index 659c0eb90..d0546a2aa 100644
--- a/src/devops/build.scm
+++ b/src/devops/build.scm
@@ -135,6 +135,10 @@ Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA.
     (let ((darch build-debian-architecture))
       (set-file-modes! (string build-dir"/"name"_"vers"_"darch".deb") #o444)
       (set-file-modes! (string build-dir"/"name"_"vers"_"darch".changes") #o444)
+      (let ((f (string build-dir"/"name"_"vers"_"darch".buildinfo")))
+	(if (file-exists? f) (set-file-modes! f #o444)))
+      (let ((f (string build-dir"/"name"-dbgsym_"vers"_"darch".ddeb")))
+	(if (file-exists? f) (set-file-modes! f #o444)))
       (run "rm -rf "pkgdir)
       (run "sudo "project-name"-install "name"_"vers"_"darch".deb"))))