setupDirectories creates necessary directories SECURITY: Use restrictive permissions (0750) for config directories This prevents unauthorized users from reading agent configuration
()
| 694 | // SECURITY: Use restrictive permissions (0750) for config directories |
| 695 | // This prevents unauthorized users from reading agent configuration |
| 696 | func (m *Manager) setupDirectories() error { |
| 697 | dirs := []string{ |
| 698 | filepath.Dir(m.configFile), |
| 699 | filepath.Dir(m.config.CredentialsFile), |
| 700 | filepath.Dir(m.config.LogFile), |
| 701 | } |
| 702 | |
| 703 | for _, dir := range dirs { |
| 704 | // Use 0750 - owner full access, group read/execute, no world access |
| 705 | if err := os.MkdirAll(dir, 0750); err != nil { |
| 706 | return fmt.Errorf("error creating directory %s: %w", dir, err) |
| 707 | } |
| 708 | } |
| 709 | |
| 710 | return nil |
| 711 | } |
no outgoing calls
no test coverage detected