ensure safe perms for svs.sqlite and sync_flag

Signed-off-by: Allie Crevier <[email protected]>

securedrop_client/app.py

@@ -190,6 +190,7 @@ def start_app(args, qt_args) -> None:
     - configure the client (logic) object.
     - ensure the application is setup in the default safe starting state.
     """
+    os.umask(0o077)
     configure_locale_and_language()
     init(args.sdc_home)
     configure_logging(args.sdc_home)

securedrop_client/gui/main.py

@@ -20,7 +20,6 @@
 along with this program.  If not, see <http://www.gnu.org/licenses/>.
 """
 import logging
-import os
 from gettext import gettext as _
 from typing import Dict, List, Optional  # noqa: F401
 
@@ -56,7 +55,6 @@ def __init__(self) -> None:
           place for details / message contents / forms.
         """
         super().__init__()
-        os.umask(0o077)
         load_font("Montserrat")
         load_font("Source_Sans_Pro")
         self.setStyleSheet(load_css("sdclient.css"))