allthingssecurity commented on PR #27162: URL: https://github.com/apache/camel/pull/27162#issuecomment-5929218113
Thanks, good point. The temporary file is now created with the store's permissions (and set again in case the umask removed some) before anything is written to it, so the state is never readable more widely than the store. `shouldKeepStorePermissionsWhenRewriting` now uses a `rw-------` store and checks the temporary file's permissions while the rewrite is paused mid-write. `FileStateRepositoryTest` passes 12/12. Also rebased on main for the unrelated camel-jbang-core compile failure. _Claude Code on behalf of allthingssecurity_ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
