From e298ee43c2c7201cd6aceaedb206f5fd5bab3663 Mon Sep 17 00:00:00 2001
From: Pallav Vasa <pallav@infilytics.in>
Date: Tue, 20 May 2025 09:27:15 +0000
Subject: [PATCH] feat: change permissions on home.tar.gz to read only (600)

---
 gitops_router.sh | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/gitops_router.sh b/gitops_router.sh
index 92ad33b..8978be5 100644
--- a/gitops_router.sh
+++ b/gitops_router.sh
@@ -163,7 +163,10 @@ update)
   ssh_router) update 1 ssh_router.sh .local/bin 500 ;;
   gitops_router) update 1 gitops_router.sh .local/bin 500 ;;
   validate_command) update 1 validate_command_access.sh .local/bin 500 ;;
-  home_tar) podman cp "$PERSON":/app/workspaces/home.tar.gz "$HOME"/ ;;
+  home_tar)
+    podman cp "$PERSON":/app/workspaces/home.tar.gz "$HOME"/
+    chmod 600 "$HOME"/home.tar.gz
+    ;;
   gitconfig) update 0 gitconfig.template . 500 ;;
   *) log ERROR "update: invalid arg '${args[0]}'" ;;
   esac