security: restrict state database filesystem permissions #359

New issue

Closed

opened 2026-07-16 21:03:42 +02:00 by dries · 0 comments

dries commented

2026-07-16 21:03:42 +02:00

Owner

What to build

Protect ocman state and authentication secrets from other local accounts by enforcing owner-only permissions on the state directory, SQLite database, and related journal files. Existing installations must be repaired safely at startup.

Acceptance criteria

New state directories are owner-accessible only.
New state database and SQLite sidecar files are not readable by group or other users.
Startup repairs overly permissive existing state paths without data loss.
Permission failures return actionable errors rather than silently continuing insecurely.
Tests verify creation and repair modes while remaining portable across supported systems.
Authentication, remote identity, migrations, and normal database operation continue to work.

Blocked by

None - can start immediately.

## What to build Protect ocman state and authentication secrets from other local accounts by enforcing owner-only permissions on the state directory, SQLite database, and related journal files. Existing installations must be repaired safely at startup. ## Acceptance criteria - [ ] New state directories are owner-accessible only. - [ ] New state database and SQLite sidecar files are not readable by group or other users. - [ ] Startup repairs overly permissive existing state paths without data loss. - [ ] Permission failures return actionable errors rather than silently continuing insecurely. - [ ] Tests verify creation and repair modes while remaining portable across supported systems. - [ ] Authentication, remote identity, migrations, and normal database operation continue to work. ## Blocked by None - can start immediately.