From 9bb77d617a2fb499a6d133d4f2a4c33dc0df8a8a Mon Sep 17 00:00:00 2001
From: Jim Meyering <meyering@fb.com>
Date: Wed, 15 Nov 2017 08:49:01 -0800
Subject: [PATCH] build: make each generated script unwritable

* Makefile.am (.in): Ensure that each generated script is unwritable.
This makes it less likely that someone (even me) will mistakenly
modify one of those generated files.
---
 Makefile.am | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/Makefile.am b/Makefile.am
index 6e5bb0f..f342808 100644
--- a/Makefile.am
+++ b/Makefile.am
@@ -80,12 +80,13 @@ gzip.doc.gz: gzip.doc $(bin_PROGRAMS)
 
 SUFFIXES = .in
 .in:
-	$(AM_V_GEN)sed \
+	$(AM_V_GEN)rm -f $@-t $@ \
+          && sed \
 		-e 's|/bin/sh|$(SHELL)|g' \
 		-e 's|[@]GREP@|$(GREP)|g' \
 		-e 's|[@]VERSION@|$(VERSION)|g' \
 		$(srcdir)/$@.in >$@-t \
-	  && chmod a+x $@-t \
+	  && chmod a=rx $@-t \
 	  && mv $@-t $@
 
 # Arrange so that .tarball-version appears only in the distribution
-- 
2.30.2