]> Untitled Git - bdk-cli/commit
fix: harden datadir and config file permissions
authorVihiga Tyonum <withtvpeter@gmail.com>
Tue, 22 Sep 2026 09:06:03 +0000 (10:06 +0100)
committerVihiga Tyonum <withtvpeter@gmail.com>
Fri, 25 Sep 2026 03:10:08 +0000 (04:10 +0100)
commitb2b99b4297a955c4ff5aee59475fc4e64e6f2868
tree5b8d46b0cc029d6af60b7f91ef744a02cbdf9a1a
parent1d4c002998b0ca5fd4f3776ddd42ac79d379bce4
fix: harden datadir and config file permissions

- Replaces `fs::create_dir_all` with `DirBuilder` enforcing 0700 on Unix.
- Replaces `fs::write` with `OpenOptions` enforcing 0600 on Unix
when writing `config.toml`.
- Adds permission hardening on startup for existing configurations.
- Add tests for permissions
CHANGELOG.md
src/config.rs
src/handlers/payjoin/db.rs
src/utils/common.rs
tests/integration/init.rs