mktemp as root, so SELinux allows root to write to the file

Author: sysrich

usr/lib/tik/lib/tik-functions

@@ -336,7 +336,7 @@ reread_partitiontable() {
 
 create_keyfile() {
     # Even if there's no partitions using encryption, systemd-repart will need a key-file defined for the --key-file parameter.
-    tik_keyfile=$(mktemp /tmp/tik.XXXXXXXXXX)
+    tik_keyfile=$(prun mktemp /tmp/tik.XXXXXXXXXX)
     log "[create_keyfile] Creating keyfile ${tik_keyfile}"
     prun /usr/bin/dd bs=512 count=4 if=/dev/urandom of=${tik_keyfile} iflag=fullblock
     prun /usr/bin/chmod 400 ${tik_keyfile}