Ensure vault file is created with 0700 rights fixes #505

oleiade · Aug 17, 2021 · 70cd3df · 70cd3df
1 parent a051fec
commit 70cd3df
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/internal/trousseau/actions.go b/internal/trousseau/actions.go
@@ -41,7 +41,7 @@ func CreateAction(ct CryptoType, ca CryptoAlgorithm, recipients []string) error
 		return err
 	}
 
-	f, err := os.OpenFile(InferStorePath(config), os.O_CREATE|os.O_WRONLY, os.ModeAppend)
+	f, err := os.OpenFile(InferStorePath(config), os.O_CREATE|os.O_WRONLY, 0700)
 	if err != nil {
 		return err
 	}