Use default permissions of 0600 for crush.json to help protect sensitive
data that is stored in plain text (api keys, etc.)
Fixes #411
commitc99034909d4e422286965f307e667d52e65e30f2
authorPeter Sanchez <peter@netlandish.com>
dateThu 31 Jul 2025, 15:04 (1 year ago)
parent3b8a8ef
internal/config/config.go+1−1
@@ -371,7 +371,7 @@ func (c *Config) SetConfigField(key string, value any) error {
371371 if err != nil {
372372 return fmt.Errorf("failed to set config field %s: %w", key, err)
373373 }
374− if err := os.WriteFile(c.dataConfigDir, []byte(newValue), 0o644); err != nil {
374+ if err := os.WriteFile(c.dataConfigDir, []byte(newValue), 0o600); err != nil {
375375 return fmt.Errorf("failed to write config file: %w", err)
376376 }
377377 return nil