Fix config file permissions to not be world-readable (#226)

stripe · Oct 9, 2019 · 1740886 · 1740886
1 parent 7e709df
commit 1740886
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/pkg/config/config.go b/pkg/config/config.go
@@ -76,6 +76,14 @@ func (c *Config) InitConfig() {
 		c.ProfilesFile = configFile
 		viper.SetConfigType("toml")
 		viper.SetConfigFile(configFile)
+		viper.SetConfigPermissions(os.FileMode(0600))
+
+		// Try to change permissions manually, because we used to create files
+		// with default permissions (0644)
+		err := os.Chmod(configFile, os.FileMode(0600))
+		if err != nil && !os.IsNotExist(err) {
+			log.Fatalf("%s", err)
+		}
 	}
 
 	// If a profiles file is found, read it in.