fix(backup): privately stage restore archive

2026-08-18 08:13:13 +02:00
parent df00f6bfa8
commit 54698e7340
8 changed files with 178 additions and 23 deletions
@@ -287,7 +287,7 @@ func (result PreflightResult) StageArchive(ctx context.Context) (_ *stagedArchiv
 		return nil, errors.New("protect private restore staging directory")
 	}
 	path := filepath.Join(directory, "archive.zip")
-	file, err := os.OpenFile(path, os.O_RDWR|os.O_CREATE|os.O_EXCL, 0o600)
+	file, err := safeio.CreateCanonicalNewPrivateFile(path)
 	if err != nil {
 		_ = os.Remove(directory)
 		return nil, errors.New("create private restore staging archive")