introduce subshells to limit side-effects

2 files changed, 5 insertions, 4 deletions

diff --git a/hook b/hook
index 9af602dadb3f..cf5ef0d6df03 100755
--- a/hook
+++ b/hook
@@ -4,7 +4,7 @@
 # nannycam init hook
 #
 
-run_hook () {
+run_hook () { (
 
   set -e
   set -u
@@ -29,4 +29,4 @@ run_hook () {
     -m "$EXPECTED_MBR_HASH" \
     -p "$EXPECTED_MBR_GAP_HASH" \
     -e "$EXPECTED_EFI_STUB_HASH"
-}
+) }
diff --git a/install b/install
index 71fad2b6ab5c..a9e81261b1ef 100755
--- a/install
+++ b/install
@@ -1,7 +1,8 @@
 #!/bin/bash
 
-build () {
+build () { (
 
+  
   set -e
   set -u
 
@@ -90,7 +91,7 @@ build () {
 
   rm "$AUTH_PUB_KEY_FILE"
   rm -rf "$TMP"
-}
+) }
 
 help () {
   cat <<HELPEOF