Fix config file permission

User config file contains a secret API that shouldn't be readable to others
almarklein · Dec 29, 2024 · ea44d42 · ea44d42
1 parent 4a66706
commit ea44d42
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/timetagger_cli/core.py b/timetagger_cli/core.py
@@ -1,6 +1,7 @@
 import time
 import datetime
 import webbrowser
+import os
 
 import requests
 
@@ -88,6 +89,8 @@ def setup(args=None):
     filename = prepare_config_file()
     print("Config file: " + filename)
     print("Will now (try to) open the config file. Just edit and save the file.")
+    # Config file contains user secret so it should not be readable to others
+    os.chmod(filename, 0o640)
     open_with_os_default(filename)