on main help sign in
Use default permissions of 0600 for crush.json to help protect sensitive
c990349Peter Sanchez
internal/config/config.go+1−1
@@ -371,7 +371,7 @@ func (c *Config) SetConfigField(key string, value any) error {
371 if err != nil {
371 if err != nil {
372 return fmt.Errorf("failed to set config field %s: %w", key, err)
372 return fmt.Errorf("failed to set config field %s: %w", key, err)
373 }
373 }
374− if err := os.WriteFile(c.dataConfigDir, []byte(newValue), 0o644); err != nil {
374+ if err := os.WriteFile(c.dataConfigDir, []byte(newValue), 0o600); err != nil {
375 return fmt.Errorf("failed to write config file: %w", err)
375 return fmt.Errorf("failed to write config file: %w", err)
376 }
376 }
377 return nil
377 return nil