The in-tree SQLite3 is used for HDB and ccache -- these should have 0600 permissions. Of course, if we're using an out-of-tree SQLite3, then we need to rely on the process' umask, but we use SQLite3 in libraries, where we can't set the umask... What to do? TBD: - On Windows: nothing to do. - On Unix: if SQLite3 is out of tree then [v]fork() to create the connection then close, then connect again after?? Or... maybe make sure to create an intermediate directory with 0700 permissions?
398 B
398 B