From 0369d9b7fb9f9a09b98298d6a0d91e90683178c9 Mon Sep 17 00:00:00 2001 From: Filippo Valsorda Date: Fri, 6 Dec 2019 23:45:54 -0500 Subject: [PATCH] cmd/age-keygen: detect world-readable output file --- cmd/age-keygen/keygen.go | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/cmd/age-keygen/keygen.go b/cmd/age-keygen/keygen.go index 4011cf3..c1e409d 100644 --- a/cmd/age-keygen/keygen.go +++ b/cmd/age-keygen/keygen.go @@ -36,6 +36,13 @@ func main() { out = f } + if fi, err := out.Stat(); err == nil { + if fi.Mode().IsRegular() && fi.Mode().Perm()&0004 != 0 { + fmt.Fprintf(os.Stderr, "Warning: writing to a world-readable file.\n") + fmt.Fprintf(os.Stderr, "Consider setting the umask to 066 and trying again.\n") + } + } + generate(out) }