This commit is contained in:
Steve Yegge
2025-11-23 20:16:18 -08:00
2 changed files with 4 additions and 4 deletions

View File

@@ -31,8 +31,8 @@ func atomicWriteFile(path string, data []byte) error {
return fmt.Errorf("close temp file: %w", err) return fmt.Errorf("close temp file: %w", err)
} }
// Set permissions to 0644 // Set permissions to 0600 (owner read/write only)
if err := os.Chmod(tmpPath, 0644); err != nil { if err := os.Chmod(tmpPath, 0600); err != nil {
_ = os.Remove(tmpPath) // Best effort cleanup _ = os.Remove(tmpPath) // Best effort cleanup
return fmt.Errorf("set permissions: %w", err) return fmt.Errorf("set permissions: %w", err)
} }

View File

@@ -35,8 +35,8 @@ func TestAtomicWriteFile(t *testing.T) {
} }
mode := info.Mode() mode := info.Mode()
if mode.Perm() != 0644 { if mode.Perm() != 0600 {
t.Errorf("file permissions mismatch: got %o, want %o", mode.Perm(), 0644) t.Errorf("file permissions mismatch: got %o, want %o", mode.Perm(), 0600)
} }
// Test overwriting existing file // Test overwriting existing file