mirror of
https://github.com/Kpa-clawbot/meshcore-analyzer.git
synced 2026-10-11 20:17:35 +00:00
nullrouten0andClaude Mythos 5.1
8b64439635
`SaveGeoFilter` rewrote `config.json` through a temp file created with mode 0644, so a config an operator had made 0600 (it holds the API key and broker passwords) became world-readable after the first geo-filter save. **Fix:** stat the original and reuse its mode for the temp file. Falls back to 0644 when the stat fails. **Tests:** `config_mode_test.go` — a 0600 config stays 0600 after a save; a 0644 config stays 0644. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: Claude Mythos 5.1 <noreply@anthropic.com>
41 lines
1.2 KiB
Go
41 lines
1.2 KiB
Go
package main
|
|
|
|
import (
|
|
"os"
|
|
"path/filepath"
|
|
"testing"
|
|
)
|
|
|
|
// SaveGeoFilter rewrites config.json through a temp file. The file holds the
|
|
// API key and broker passwords, so the rewrite must keep whatever mode the
|
|
// operator set rather than resetting it to 0644.
|
|
func TestSaveGeoFilterPreservesFileMode(t *testing.T) {
|
|
dir := t.TempDir()
|
|
path := filepath.Join(dir, "config.json")
|
|
if err := os.WriteFile(path, []byte(`{"apiKey":"secret-key-that-is-long-enough"}`+"\n"), 0600); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
gf := &GeoFilterConfig{Polygon: [][2]float64{{0, 0}, {0, 1}, {1, 1}, {1, 0}}}
|
|
if err := SaveGeoFilter(dir, gf); err != nil {
|
|
t.Fatalf("SaveGeoFilter: %v", err)
|
|
}
|
|
fi, err := os.Stat(path)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if got := fi.Mode().Perm(); got != 0600 {
|
|
t.Fatalf("config.json mode after save = %o, want 0600", got)
|
|
}
|
|
// Default stays 0644 for a file that was 0644.
|
|
if err := os.Chmod(path, 0644); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if err := SaveGeoFilter(dir, nil); err != nil {
|
|
t.Fatalf("SaveGeoFilter(nil): %v", err)
|
|
}
|
|
fi, _ = os.Stat(path)
|
|
if got := fi.Mode().Perm(); got != 0644 {
|
|
t.Fatalf("config.json mode after save = %o, want 0644", got)
|
|
}
|
|
}
|