Skip to content

Commit 69fb5f2

Browse files
suryaiyer95claude
andcommitted
fix: enforce file permissions on credential overwrite
`Filesystem.write()` passes `mode` to `writeFile()`, but Node.js only applies the mode on file creation — not when overwriting an existing file. Add explicit `chmod()` after write to ensure `0o600` permissions are always enforced on `~/.altimate/altimate.json`, even on subsequent logins. Addresses Sentry review finding on PR #162. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
1 parent d75957c commit 69fb5f2

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

packages/opencode/src/util/filesystem.ts

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -55,6 +55,7 @@ export namespace Filesystem {
5555
try {
5656
if (mode) {
5757
await writeFile(p, content, { mode })
58+
await chmod(p, mode)
5859
} else {
5960
await writeFile(p, content)
6061
}
@@ -63,6 +64,7 @@ export namespace Filesystem {
6364
await mkdir(dirname(p), { recursive: true })
6465
if (mode) {
6566
await writeFile(p, content, { mode })
67+
await chmod(p, mode)
6668
} else {
6769
await writeFile(p, content)
6870
}

0 commit comments

Comments
 (0)