Module secure_fs 

Owner-only secret files.

Functions

private_dir

Creates dir (and its parents) and restricts it to its owner (0700 on Unix). Errors name the step and the path.

restrict_to_owner

Sets path to mode 0700 on Unix, but only when its mode differs (GH #2227).

write_private

Writes dir/name so that it is never readable by others and never seen half-written: private_dir and write_secret_file.