From 4d10dcf5629e4f0064d213b3c60a007efff31968 Mon Sep 17 00:00:00 2001
From: Michael Geers <michael@geers.tv>
Date: Sat, 21 Jun 2025 11:10:45 +0200
Subject: [PATCH] Establish stricter sqlite file permissions (#21947)

---
 server/db/db.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/server/db/db.go b/server/db/db.go
index e97cac9a4..f67d6cb44 100644
--- a/server/db/db.go
+++ b/server/db/db.go
@@ -25,7 +25,7 @@ func New(driver, dsn string) (*gorm.DB, error) {
 			return nil, err
 		}
 		log.INFO.Println("using sqlite database:", file)
-		if err := os.MkdirAll(filepath.Dir(file), os.ModePerm); err != nil {
+		if err := os.MkdirAll(filepath.Dir(file), 0700); err != nil {
 			return nil, err
 		}
 		// avoid busy errors