Skip to content

log files should not be world-readable #79

Description

@notnmeyer

log files are created with 0644 permissions (world-readable).

problem

$ ls -la ~/.local/share/daylog/default/2025/06/27/log.md
-rw-r--r--  user  group  log.md

if $XDG_DATA_HOME has loose permissions (shared machine, misconfigured umask), anyone can read your personal notes.

fix

use 0600 (owner-only read/write):

// in daylog.go
if err := os.WriteFile(d.Path, content, 0600); err != nil {
    return err
}

directories stay 0755, which is fine.

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions