InputUsername/rescrobbled

Autogenerated config should have tighter permissions

gjabell opened this issue · 3 comments

gjabell commented

Thanks for the project, just started using it and it's working great so far!

I noticed that when the configuration file is autogenerated it has default (in my case 644) permissions, which are readable by everyone. Since this file will likely contain authentication secrets, it would be great if it were created with 600 permissions so it's only readable by the user that runs rescrobbled.

InputUsername commented

Great suggestion - shouldn't be too hard to implement, I will add this in the next release

Thanks!

  • 🚀1
InputUsername commented

I just realized this should also be the case for the session token, so I will fix the permissions for that as well.

InputUsername commented

This has been added on the development branch and will be released with v0.5.0!

  • 👍1