sandbox=$(mktemp -d) trap 'rm -rf "$sandbox"' EXIT umask 077 : > "$sandbox/report" chmod g+r "$sandbox/report" stat -c '%a' "$sandbox/report"