Merge pull request #129 from soulteary/fix/G301-Expect-directory-permissions-to-be-0750-or-less

fix: Expect directory permissions to be 0750 or less

Author: soulteary

internal/configui/configui.go

@@ -364,7 +364,7 @@ func runSave(w http.ResponseWriter, r *http.Request, writeDir string) {
 		writeJSONError(w, http.StatusBadRequest, "invalid path")
 		return
 	}
-	if err := os.MkdirAll(writeDir, 0755); err != nil {
+	if err := os.MkdirAll(writeDir, 0750); err != nil {
 		writeJSONError(w, http.StatusInternalServerError, "failed to create directory: "+err.Error())
 		return
 	}

internal/monitor/watcher.go

@@ -14,7 +14,7 @@ var watcher *fsnotify.Watcher
 func ApplyWatcher(appFlags flags.AppFlags) {
 	// -hooks-dir: watch directory for new/changed/removed hook config files (including when dir is empty)
 	if appFlags.HooksDir != "" {
-		if err := os.MkdirAll(appFlags.HooksDir, 0755); err != nil {
+		if err := os.MkdirAll(appFlags.HooksDir, 0750); err != nil {
 			logger.Fatalf("error creating hooks-dir %s: %v", appFlags.HooksDir, err)
 		}
 		go WatchDir(appFlags.HooksDir, appFlags.AsTemplate, appFlags.Verbose, appFlags.NoPanic)