We really don't have a sane story for private files. This is a
defensive step ensuring that with old versions of gnome-ostree,
components that mistakenly have un-world-readable files don't break
pulls.
*/
src_mode = g_file_info_get_attribute_uint32 (file_info, "unix::mode");
target_mode = src_mode & (S_IRWXU | S_IRWXG | S_IRWXO | S_IFMT);
+ /* However, do ensure that archive mode files are
+ * readable by all users. This is important for serving
+ * files via HTTP.
+ */
+ target_mode |= (S_IRUSR | S_IRGRP | S_IROTH);
if (chmod (ot_gfile_get_path_cached (raw_temp_file), target_mode) < 0)
{