fix: change SQLite database mode to 0600 (#2344)

The default mode is 0644, which is allows broader access than necessary.
ory · Mar 28, 2022 · 0e5d3b7 · 0e5d3b7
1 parent 5efe4a3
commit 0e5d3b7
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/.docker/Dockerfile-build b/.docker/Dockerfile-build
@@ -11,6 +11,7 @@ ADD internal/httpclient/go.* internal/httpclient/
 
 ENV GO111MODULE on
 ENV CGO_ENABLED 1
+ENV CGO_CPPFLAGS -DSQLITE_DEFAULT_FILE_PERMISSIONS=0600
 
 RUN go mod download