ceph-daemon: fchmod before writing to keyring file

Signed-off-by: Sage Weil <sage@redhat.com>

diff --git a/src/ceph-daemon b/src/ceph-daemon
index 8a652ec3072da8b87745fbe74446910dd4f350e7..79fb8a1b0344ce8ed729dfe0730b6559e71d7dd2 100755 (executable)
--- a/src/ceph-daemon
+++ b/src/ceph-daemon
@@ -618,9 +618,9 @@ def command_bootstrap():
     # output files
     if args.output_keyring:
         with open(args.output_keyring, 'w') as f:
+            os.fchmod(f.fileno(), 0o600)
             f.write('[client.admin]\n'
                     '\tkey = ' + admin_key + '\n')
-            os.fchmod(f.fileno(), 0o600)
         logging.info('Wrote keyring to %s' % args.output_keyring)
     if args.output_config:
         with open(args.output_config, 'w') as f: