Issue #95 Add warning when config can be read globally.

1 files changed, 11 insertions, 0 deletions

diff --git a/pkg/config/config.go b/pkg/config/config.go
index a7c540f..0d2c944 100644
--- a/pkg/config/config.go
+++ b/pkg/config/config.go
@@ -125,6 +125,17 @@ func Load(path string) (*Config, error) {
 		return nil, fmt.Errorf("while opening '%s': %w", path, err)
 	}
 
+	defer f.Close()
+
+	stat, err := f.Stat()
+	if err != nil {
+		return nil, fmt.Errorf("while getting stats of '%s': %w", path, err)
+	}
+
+	if stat.Mode().Perm()&0004 != 0 {
+		log.Warnf("Config file '%s' can be read by anyone. As this contains your IMAP credentials, you are advised to remove global read access.", path)
+	}
+
 	cfg := WithDefault()
 	if err = cfg.parse(f); err != nil {
 		return nil, fmt.Errorf("while parsing: %w", err)