Method open_private

src/storage.rs:488–492

Opens `path` for writing, creating it if missing with owner-only permissions applied at create time (Unix), so a fresh file never exists with umask-default permissions before the trailing `set_private_file_permissions` call. Pre-existing files keep their mode here and are tightened by that trailing call.

(path: &Path, options: &mut fs::OpenOptions)

    /// `set_private_file_permissions` call. Pre-existing files keep their
    /// mode here and are tightened by that trailing call.
    fn open_private(path: &Path, options: &mut fs::OpenOptions) -> io::Result<fs::File> {
        options.create(true);
        apply_private_create_mode(options);
        options.open(path)
    }

    pub fn write_file_atomically(path: &Path, temp_path: &Path, contents: &[u8]) -> io::Result<()> {
        if path_parent(path) != path_parent(temp_path) {