synapsecns/sanguine

// Package permissions provides platform-specific file permission handling
package permissions

import (
    "fmt"
    "os"
    "runtime"
)

const (
    // DefaultUmask is the default umask value for secure file operations.
    DefaultUmask = 0077
    // FilePerms is the default permission for regular files.
    FilePerms = 0400
    // DirPerms is the default permission for directories.
    DirPerms = 0750
    // ExecPerms is the default permission for executables.
    ExecPerms = 0500
)

// SetSecureUmask sets a secure umask and returns a cleanup function.
func SetSecureUmask() (func(), error) {
    if runtime.GOOS == "windows" {
        return func() {}, nil
    }
    return setUnixUmask()
}

// SetFilePermissions sets secure file permissions in a platform-specific way.
func SetFilePermissions(path string, perm os.FileMode) error {
    if runtime.GOOS == "windows" {
        if err := os.Chmod(path, perm); err != nil {
            return fmt.Errorf("failed to set file permissions on Windows: %w", err)
        }
        return nil
    }
    return setUnixPermissions(path, perm)
}