Change default directory permissions to be more restrictive (#46) (#71)

Make the config directory be 0755. Make the restic backups directory be 0700.
CanastaWiki · Feb 6, 2024 · 29c1a91 · 29c1a91
1 parent c626b3e
commit 29c1a91
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/cmd/restic/restic.go b/cmd/restic/restic.go
@@ -64,7 +64,7 @@ func checkCurrentSnapshotFolder(currentSnapshotFolder string) {
 	if _, err := os.Stat(currentSnapshotFolder); err != nil {
 		if os.IsNotExist(err) {
 			logging.Print("Creating..." + currentSnapshotFolder)
-			if err := os.Mkdir(currentSnapshotFolder, os.ModePerm); err != nil {
+			if err := os.Mkdir(currentSnapshotFolder, 0o700); err != nil {
 				logging.Fatal(err)
 			}
 		} else {
@@ -75,7 +75,7 @@ func checkCurrentSnapshotFolder(currentSnapshotFolder string) {
 		if err := os.RemoveAll(currentSnapshotFolder); err != nil {
 			logging.Fatal(err)
 		}
-		if err := os.Mkdir(currentSnapshotFolder, os.ModePerm); err != nil {
+		if err := os.Mkdir(currentSnapshotFolder, 0o700); err != nil {
 			logging.Fatal(err)
 		}
 		logging.Print("Emptied.. " + currentSnapshotFolder)

diff --git a/internal/config/config.go b/internal/config/config.go
@@ -197,7 +197,7 @@ func GetConfigDir() string {
 	fi, err := os.Stat(dir)
 	if os.IsNotExist(err) {
 		log.Print(fmt.Sprintf("Creating %s\n", dir))
-		err = os.MkdirAll(dir, os.ModePerm)
+		err = os.MkdirAll(dir, 0o755)
 		if err != nil {
 			log.Fatal(err)
 		}