v0.2.0 toml-only, harden concurrency and env export, dep updates

ownership_unix.go

@@ -0,0 +1,17 @@
+//go:build unix
+
+package config
+
+import (
+	"fmt"
+	"os"
+	"syscall"
+)
+
+func checkFileOwner(info os.FileInfo) error {
+	stat, ok := info.Sys().(*syscall.Stat_t)
+	if !ok || stat.Uid != uint32(os.Geteuid()) {
+		return wrapError(ErrFileAccess, fmt.Errorf("config file is not owned by current user"))
+	}
+	return nil
+}