From 388bde65de0a45adac86a50cd6a728bb77441314 Mon Sep 17 00:00:00 2001
From: "google-labs-jules[bot]"
 <161369871+google-labs-jules[bot]@users.noreply.github.com>
Date: Sun, 5 Apr 2026 13:20:12 +0000
Subject: [PATCH] Refactor snapshot dir creation to use secure permissions

Replaced `fs::create_dir_all` with `crate::paths::create_secure_dir_all` in `src/commands/snapshot.rs` to ensure the snapshot directory is created with secure default permissions (0o700) instead of relying on the system's default umask.

Co-authored-by: bitcoiner-dev <75873427+bitcoiner-dev@users.noreply.github.com>
---
 src/commands/snapshot.rs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/commands/snapshot.rs b/src/commands/snapshot.rs
index 7be1d9e..0fb3f5c 100644
--- a/src/commands/snapshot.rs
+++ b/src/commands/snapshot.rs
@@ -7,7 +7,7 @@ use std::fs;
 pub async fn run(cli: &Cli, args: &SnapshotArgs) -> Result<CommandOutput, AppError> {
     let profile_path = profile_path(cli)?;
     let snap_dir = snapshot_dir(cli)?;
-    fs::create_dir_all(&snap_dir)
+    crate::paths::create_secure_dir_all(&snap_dir)
         .map_err(|e| AppError::Config(format!("failed to create snapshot dir: {e}")))?;
 
     match &args.action {