securefile

Documentation

Overview

Package securefile centralizes permissions for local Sable secret files.

Index

• func PermissionWarning(path string) (string, error)
• func Restrict(path string) error
• func WriteFile(path string, data []byte) error

Functions

func PermissionWarning

func PermissionWarning(path string) (string, error)

PermissionWarning returns a human-readable warning when path is readable or writable by principals beyond the local operator/admin set.

func Restrict

func Restrict(path string) error

Restrict tightens permissions on an existing sensitive file.

func WriteFile

func WriteFile(path string, data []byte) error

WriteFile writes to an already-restricted temporary file and atomically replaces path. Sensitive bytes are never exposed through a broadly inherited ACL while the write is in progress.