synapsecns/sanguine

//go:build !windows

package permissions

import (
    "fmt"
    "os"
    "syscall"
)

// setUnixPermissions sets secure file permissions on Unix systems.
func setUnixPermissions(path string, perm os.FileMode) error {
    oldUmask := syscall.Umask(DefaultUmask)
    defer syscall.Umask(oldUmask)
    if err := os.Chmod(path, perm); err != nil {
        return fmt.Errorf("failed to set file permissions on Unix: %w", err)
    }
    return nil
}

// setUnixUmask sets a secure umask on Unix systems.
func setUnixUmask() (func(), error) {
    oldUmask := syscall.Umask(DefaultUmask)
    return func() {
        syscall.Umask(oldUmask)
    }, nil
}