Fix R5: SealedStore plaintext tmp 0600 + SQLCipher deferred note #9

leora · 2026-10-06T06:14:42+08:00

leora commented

2026-10-06 06:14:42 +08:00

Summary

R5: plaintext working copy was 0644; document SQLCipher deferred.

Changes

_write_private_file via os.open(..., 0o600) + fsync + unlink on failure
Pin temp dir 0700; chmod plain/export; delete export after flush
Docs: SQLCipher deferred; seal ≠ encrypted-DB-while-open
Regression test for 0600/0700

Test plan

142 tests pass

## Summary **R5**: plaintext working copy was 0644; document SQLCipher deferred. ## Changes - `_write_private_file` via `os.open(..., 0o600)` + fsync + unlink on failure - Pin temp dir 0700; chmod plain/export; delete export after flush - Docs: SQLCipher deferred; seal ≠ encrypted-DB-while-open - Regression test for 0600/0700 ## Test plan - [x] 142 tests pass

leora added 1 commit 2026-10-06 06:14:42 +08:00

Fix R5: SealedStore plaintext tmp is 0600 with fsync/cleanup 4e65f6671a

Plaintext working copy and export backup were creatable world-readable
under a 0700 temp dir. Write via os.open(mode=0600), fsync, unlink on
failure; pin temp dir 0700; remove export after flush. Document SQLCipher
as deferred — seal-on is not an encrypted DB while the process is open.

leora merged commit cd87be6b8d into sigil-initial

2026-10-06 06:14:43 +08:00

leora referenced this issue from a commit

2026-10-06 06:14:43 +08:00

Merge pull request 'Fix R5: SealedStore plaintext tmp 0600 + SQLCipher deferred note' (#9) from leora/fix-r5-sealed-tmp-hardening into sigil-initial

leora referenced this pull request

2026-10-06 06:16:20 +08:00

Sigil: agent identity for the new internet #1

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: bigpickle/sigil#9