Reduce default permissions of config directory

As the config directory may include secrets (read with privilege from the system), use the least needed permissions when we are creating the directory. Fixes #142.
CyberShadow · Mar 20, 2022 · 7698f9a · 7698f9a
1 parent c23211f
commit 7698f9a
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/src/common.bash b/src/common.bash
@@ -127,7 +127,8 @@ function AconfCompileOutput() {
 	touch "$output_dir"/foreign-packages.txt
 	touch "$output_dir"/file-props.txt
 	touch "$output_dir"/warnings
-	mkdir --parents "$config_dir"
+	# shellcheck disable=SC2174
+	mkdir --mode=700 --parents "$config_dir"
 
 	# Configuration
 

diff --git a/src/save.bash b/src/save.bash
@@ -144,7 +144,8 @@ function AconfSave() {
 
 				local dir
 				dir="$(dirname "$file")"
-				mkdir --parents "$config_dir"/files/"$dir"
+				# shellcheck disable=SC2174
+				mkdir --mode=700 --parents "$config_dir"/files/"$dir"
 
 				local func args props suffix=''