use 0600 for auto unzip file permissions

prevent executing for safety and only allow user to have access
This commit is contained in:
Evan Su 2025-04-13 14:40:52 -04:00
parent d7a0ee126b
commit bad71f95ce
2 changed files with 2 additions and 1 deletions

View file

@ -9,6 +9,7 @@
<li>✓ Encrypt previously unencrypted temporary zip files</li>
<li>✓ Add `.incomplete` to filenames while work is in progress</li>
<li>✓ Use `encrypted-*.zip.pcv` output name instead of `Encrypted.zip.pcv`</li>
<li>✓ Use 0600 permissions when auto unzipping for optimal security</li>
</ul>
# v1.47 (Released 02/19/2025)

View file

@ -2502,7 +2502,7 @@ func unpackArchive(zipPath string) error {
outPath := filepath.Join(extractDir, f.Name)
// Otherwise create necessary parent directories
if err := os.MkdirAll(filepath.Dir(outPath), 0755); err != nil {
if err := os.MkdirAll(filepath.Dir(outPath), 0600); err != nil {
return err
}