fix(config): portable perms check with BSD fallback, follow symlinks #6

Merged

w33ble merged 1 commit from fix/bsd-stat-config-perms into main

2026-10-06 10:33:14 -06:00

hijynx commented

2026-10-06 10:32:14 -06:00

Collaborator

Summary

load_config() perms check now falls back from GNU stat -c '%a' to BSD stat -f '%Lp' so macOS/BSD no longer hard-fail.
Both branches use -L to dereference symlinks, so dotfile-managed configs (~/.config/forgejo-cli/config -> ~/dotfiles/...) report the target's mode instead of 777.

Why

GNU-only stat -c breaks the CLI on macOS/BSD entirely.
Without -L, symlinked configs are falsely rejected as insecure (777 is the link mode, not the file mode).

## Summary - `load_config()` perms check now falls back from GNU `stat -c '%a'` to BSD `stat -f '%Lp'` so macOS/BSD no longer hard-fail. - Both branches use `-L` to dereference symlinks, so dotfile-managed configs (`~/.config/forgejo-cli/config` -> `~/dotfiles/...`) report the target's mode instead of `777`. ## Why - GNU-only `stat -c` breaks the CLI on macOS/BSD entirely. - Without `-L`, symlinked configs are falsely rejected as insecure (`777` is the link mode, not the file mode).

hijynx added 1 commit

2026-10-06 10:32:14 -06:00