securestore

package

v0.1.0 Latest Latest Go to latest Published: Jul 27, 2026 License: MIT Imports: 8 Imported by: 0

Details

Package securestore provides small immutable files in an owner-only directory.

This section is empty.

This section is empty.

This section is empty.

type Store struct {
	// contains filtered or unexported fields
}

Store holds a validated directory descriptor for no-follow file operations.

func Open(path string, create bool, label string) (*Store, error)

Open opens or creates an owner-only directory.

func (s *Store) AliasesDirectory(candidate *os.File) (bool, error)

AliasesDirectory reports whether candidate is this store's held directory.

func (s *Store) Close() error

Close releases the held directory descriptor.

func (s *Store) Create(name string, data []byte) error

Create writes and syncs a new immutable owner-only file.

func (s *Store) Delete(name string) error

Delete durably removes one secure value.

func (s *Store) Read(name string) ([]byte, error)

Read reads one validated owner-only file with a fixed memory bound.

func (s *Store) Replace(name string, data []byte) error

Replace atomically writes and syncs an owner-only value. The destination is selected relative to the already-validated directory descriptor.