Use default permissions of 0600 for crush.json to help protect sensitive

Peter Sanchez created 3 months ago

data that is stored in plain text (api keys, etc.)

Fixes #411

Change summary

internal/config/config.go | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)

Detailed changes

internal/config/config.go

@@ -371,7 +371,7 @@ func (c *Config) SetConfigField(key string, value any) error {
 	if err != nil {
 		return fmt.Errorf("failed to set config field %s: %w", key, err)
 	}
-	if err := os.WriteFile(c.dataConfigDir, []byte(newValue), 0o644); err != nil {
+	if err := os.WriteFile(c.dataConfigDir, []byte(newValue), 0o600); err != nil {
 		return fmt.Errorf("failed to write config file: %w", err)
 	}
 	return nil