Drew Newberry 6b70e7dda8 fix(core): harden file permissions for user config directory ...

Sensitive files in the OpenShell config directory (~/.config/openshell/)
were created with default umask permissions, making them world-readable.
This is a security concern for mTLS private keys (tls.key) and auth
tokens.

- Add centralized paths module to openshell-core with permission helpers
  (create_dir_restricted 0o700, set_file_owner_only 0o600)
- Set 0o600 on tls.key in mtls.rs (was inheriting umask, typically 0o644)
- Set 0o700 on all config directories (mtls/, gateways/, forwards/, etc.)
- Migrate legacy cf_token files to new edge_token path with proper perms
- Deduplicate xdg_config_dir() from 6 locations into openshell-core

2026-03-15 14:11:40 -07:00

..

src

fix(core): harden file permissions for user config directory

2026-03-15 14:11:40 -07:00

Cargo.toml

fix(core): harden file permissions for user config directory

2026-03-15 14:11:40 -07:00