Create audit records as read-only when using FS backend.

There is no reason to ever modify the records.
This commit is contained in:
Catherine
2026-04-26 22:55:07 +00:00
parent b7170e3077
commit f001107056

View File

@@ -489,7 +489,7 @@ func (fs *FSBackend) AppendAuditLog(ctx context.Context, id AuditID, record *Aud
panic(fmt.Errorf("audit ID collision: %s", id))
}
return fs.auditRoot.WriteFile(id.String(), EncodeAuditRecord(record), 0o644)
return fs.auditRoot.WriteFile(id.String(), EncodeAuditRecord(record), 0o444)
}
func (fs *FSBackend) QueryAuditLog(ctx context.Context, id AuditID) (*AuditRecord, error) {