Stephen Chin edf1a9604a fix(hermes-agent): harden .hermes directory permissions ...

The response_store.db and session JSON files under ~/.hermes/ are stored
in plaintext and readable by any process with filesystem access. Set
~/.hermes to 0700 (owner-only) and ~/home/hermes to 0750 to restrict
access to conversation history, credentials, and session data.

Ref: https://github.com/NousResearch/hermes-agent/issues/7486

2026-05-02 08:09:21 -07:00

3.5 KiB

Raw Blame History

View Raw