diff --git a/core/src/main/java/jenkins/install/SetupWizard.java b/core/src/main/java/jenkins/install/SetupWizard.java index 4b221f19f87c568ec8a08b020d6da24fd7fd4bad..667ef69bd720950a17ccacd7d813be34b53f664a 100644 --- a/core/src/main/java/jenkins/install/SetupWizard.java +++ b/core/src/main/java/jenkins/install/SetupWizard.java @@ -79,8 +79,10 @@ public class SetupWizard { // JENKINS-33599 - write to a file in the jenkins home directory // most native packages of Jenkins creates a machine user account 'jenkins' to run Jenkins, // and use group 'jenkins' for admins. So we allo groups to read this file - iapf.write(randomUUID + System.lineSeparator(), "UTF-8"); + iapf.touch(System.currentTimeMillis()); iapf.chmod(0640); + iapf.write(randomUUID + System.lineSeparator(), "UTF-8"); + // Lock Jenkins down: FullControlOnceLoggedInAuthorizationStrategy authStrategy = new FullControlOnceLoggedInAuthorizationStrategy();