docs: mention umask need when curl creates files

for cookies, alt-svc and HSTS, command line and library

Closes #19396
This commit is contained in:
Daniel Stenberg 2025-11-07 13:42:36 +01:00
parent 891714acb4
commit d8bad9926c
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
7 changed files with 22 additions and 0 deletions

View file

@ -37,3 +37,6 @@ If the cookie jar cannot be created or written to, the whole curl operation
does not fail or even report an error clearly. Using --verbose gets a warning
displayed, but that is the only visible feedback you get about this possibly
lethal situation.
You may want to restrict your umask to prevent other users on the same system
to access the created file.