CVE-2022-4968: Insecure Temporary World Readable Umaskcve-2022-4968-insecure-temporary-world-readable-umask
Temporarily assigning a permissive umask (e.g., 022) to force newly created files to be world-readable can leak sensitive information. For example, VPN private keys in network configuration files may become accessible to unprivileged local users (CVE-2022-4968). Additionally, umask() is process-wide and not thread-safe. Instead of toggling umask, explicitly
