fix(tokens): restrict chmod to user only

2026-04-17 01:14:25 +02:00
parent 130deaf320
commit 0a7fec53ab
3 changed files with 9 additions and 2 deletions
@@ -41,7 +41,7 @@ class Registry:

    def set_token_hash(self, path: str, token_hash: str) -> None:
        if self.pages[path].token_hash != token_hash:
-            self.data_dir.set_file(path, self.TOKEN_FILE, token_hash)
+            self.data_dir.set_file(path, self.TOKEN_FILE, token_hash, 0o600)
            self.pages[path].token_hash = token_hash
            self.logger.debug("Updated %s", self.pages[path])