Merge pull request arduino#255 from arduino/permissions

Set correct permissions when downloading tool [WE-44]

Author: rsora

tools/download.go

@@ -423,7 +423,8 @@ func extractTarGz(body []byte, location string) (string, error) {
 		info := header.FileInfo()
 
 		// Create parent folder
-		if err = os.MkdirAll(filepath.Dir(path), info.Mode()); err != nil {
+		dirmode := info.Mode() | os.ModeDir | 0700
+		if err = os.MkdirAll(filepath.Dir(path), dirmode); err != nil {
 			return location, err
 		}
 
@@ -514,6 +515,12 @@ func extractBz2(body []byte, location string) (string, error) {
 		path := filepath.Join(location, strings.Replace(header.Name, basedir, "", -1))
 		info := header.FileInfo()
 
+		// Create parent folder
+		dirmode := info.Mode() | os.ModeDir | 0700
+		if err = os.MkdirAll(filepath.Dir(path), dirmode); err != nil {
+			return location, err
+		}
+
 		if info.IsDir() {
 			if err = os.MkdirAll(path, info.Mode()); err != nil {
 				return location, err