* apt-pkg/depcache.cc:

  - always chmod extended_states to 0644

apt-pkg/depcache.cc

@@ -26,6 +26,8 @@
 #include <sstream>    
 #include <set>
 
+#include <sys/stat.h>
+
 #include <apti18n.h>    
 
 pkgDepCache::ActionGroup::ActionGroup(pkgDepCache &cache) :
@@ -253,8 +255,9 @@ bool pkgDepCache::writeStateFile(OpProgress *prog)
    }
    fclose(OutFile);
 
-   // move the outfile over the real file
+   // move the outfile over the real file and set permissions
    rename(outfile.c_str(), state.c_str());
+   chmod(state.c_str(), 0644);
 
    return true;
 }

cmdline/apt-mark

@@ -61,3 +61,4 @@ if __name__ == "__main__":
                 outfile.write(str(tagfile.Section)+"\n")
         # all done, rename the tmpfile
         os.rename(outfile.name, STATE_FILE)
+        os.chmod(outfile.name, 0644)