Merge pull request 'password_store: create secrets with correct permissions' (#1989) from pass_umask into main

2024-08-30 10:22:06 +00:00
parent b8ce053cbf 72615f7575
commit 0c135dc2ff
1 changed files with 1 additions and 0 deletions
--- a/pkgs/clan-cli/clan_cli/facts/secret_modules/password_store.py
+++ b/pkgs/clan-cli/clan_cli/facts/secret_modules/password_store.py
@@ -106,6 +106,7 @@ class SecretStore(SecretStoreBase):
        return local_hash.decode() == remote_hash

    def upload(self, output_dir: Path) -> None:
+        os.umask(0o077)
        for service in self.machine.facts_data:
            for secret in self.machine.facts_data[service]["secret"]:
                if isinstance(secret, dict):