Correctly handle the permissions of temp files on unix (#772)

Author: mitsuhiko

CHANGELOG.md

@@ -2,6 +2,10 @@
 
 All notable changes to MiniJinja are documented here.
 
+## 2.10.0
+
+- Fix incorrect permissions when `--output` is used in the CLI.  #772
+
 ## 2.9.0
 
 - Do not panic if too large templates (too many lines or too many

minijinja-cli/src/output.rs

@@ -17,7 +17,14 @@ impl Output {
                 None
             } else {
                 let filename = std::env::current_dir()?.join(filename);
-                let ntf = NamedTempFile::new_in(
+                #[allow(unused_mut)]
+                let mut builder = tempfile::Builder::new();
+                #[cfg(unix)]
+                {
+                    use std::os::unix::fs::PermissionsExt;
+                    builder.permissions(std::fs::Permissions::from_mode(0o666));
+                }
+                let ntf = builder.tempfile_in(
                     filename
                         .parent()
                         .ok_or_else(|| anyhow!("cannot write to root"))?,