I am assuming you still own the file as USER, you never specified. If so, then Hacker_A, logged in as USER, can run chmod 600 on the file and be able to read it. Changing modes does not require root/doas.
-Brian > On Aug 10, 2026, at 11:53 AM, broke <[email protected]> wrote: > > I was thinking whether or not you really need encrypted secrets in a file > when you could possibly just use 'chmod 0' to hide it and view it using > doas. any app with user USER won't be able to access without doas password > and all I need to do is have a good user password. > > Tell me if I am wrong though, just a thought. >
