When gpg-agent is run as a systemd user service (not in the session).

Also, PIN of the keyring should not be visible to other users on the system.

1 files changed, 3 insertions, 1 deletions

diff --git a/pinentry-rofi.sh b/pinentry-rofi.sh
index d64a1f6..e09c60e 100755
--- a/pinentry-rofi.sh
+++ b/pinentry-rofi.sh
@@ -100,6 +100,7 @@ keyinfo=""
 
 main () {
     local temp_str
+    umask 0077
 
     assuan_send "OK Please go ahead"
 
@@ -231,7 +232,8 @@ main () {
 
 
 if [ "$0" = "$BASH_SOURCE" ]; then
-    if [ "$XDG_SESSION_TYPE" != "tty" ] ; then
+    sess_type="${XDG_SESSION_TYPE:-}"
+    if [ "$sess_type" != "tty" ] ; then
         main
     else
         pinentry-tty "$@"