security: restrict secret files to owner-only (0600)

This commit is contained in:
zhom
2026-07-07 22:44:31 +04:00
parent 862831764d
commit 15a7647e74
5 changed files with 39 additions and 14 deletions
+6 -3
View File
@@ -266,7 +266,8 @@ impl SettingsManager {
file_data.extend_from_slice(&(ciphertext.len() as u32).to_le_bytes());
file_data.extend_from_slice(&ciphertext);
std::fs::write(token_file, file_data)?;
std::fs::write(&token_file, file_data)?;
crate::app_dirs::restrict_to_owner(std::path::Path::new(&token_file));
Ok(())
}
@@ -434,7 +435,8 @@ impl SettingsManager {
file_data.extend_from_slice(&(ciphertext.len() as u32).to_le_bytes());
file_data.extend_from_slice(&ciphertext);
std::fs::write(token_file, file_data)?;
std::fs::write(&token_file, file_data)?;
crate::app_dirs::restrict_to_owner(std::path::Path::new(&token_file));
Ok(())
}
@@ -573,7 +575,8 @@ impl SettingsManager {
file_data.extend_from_slice(&(ciphertext.len() as u32).to_le_bytes());
file_data.extend_from_slice(&ciphertext);
std::fs::write(token_file, file_data)?;
std::fs::write(&token_file, file_data)?;
crate::app_dirs::restrict_to_owner(std::path::Path::new(&token_file));
Ok(())
}