From 99d97804f4ad4cf7722c75846c2f15ba11077d80 Mon Sep 17 00:00:00 2001
From: WithoutPants <53250216+WithoutPants@users.noreply.github.com>
Date: Wed, 22 May 2024 14:59:25 +1000
Subject: [PATCH] Change umask when creating config file to exclude user write
 (#4866)

---
 internal/manager/config/config.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/internal/manager/config/config.go b/internal/manager/config/config.go
index 9a65fd301..79f3eb3d2 100644
--- a/internal/manager/config/config.go
+++ b/internal/manager/config/config.go
@@ -453,7 +453,7 @@ func (i *Config) Write() error {
 		return err
 	}
 
-	return os.WriteFile(i.filePath, data, 0644)
+	return os.WriteFile(i.filePath, data, 0640)
 }
 
 func (i *Config) Marshal() ([]byte, error) {