Create config with user only permission & fix bug in key.go

Signed-off-by: Pritesh Bandi <pritesb@amazon.com>
notaryproject · Feb 8, 2023 · e1d18fa · e1d18fa
1 parent 5e5cba1
commit e1d18fa
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/config/base.go b/config/base.go
@@ -14,11 +14,13 @@ func save(filePath string, cfg interface{}) error {
 	if err := os.MkdirAll(dir, 0700); err != nil {
 		return err
 	}
-	file, err := os.Create(filePath)
+
+	file, err := os.OpenFile(filePath, os.O_RDWR|os.O_CREATE|os.O_TRUNC, 0600)
 	if err != nil {
 		return err
 	}
 	defer file.Close()
+
 	encoder := json.NewEncoder(file)
 	encoder.SetIndent("", "    ")
 	return encoder.Encode(cfg)

diff --git a/config/keys.go b/config/keys.go
@@ -148,7 +148,7 @@ func (s *SigningKeys) Remove(keyName ...string) ([]string, error) {
 		}
 		s.Keys = slices.Delete(s.Keys, idx)
 		deletedNames = append(deletedNames, name)
-		if *s.Default == name {
+		if s.Default !=nil && *s.Default == name {
 			s.Default = nil
 		}
 	}