NousResearch/hermes-agent

SSH desktop mode umask 077 causes restrictive file permissions

Cluster 115512. Data as of 2026-10-26 12:29 UTC

Nothing open on GitHub. Fix merged in #116872 on 20 Sep 2026. Check it covers your case.

open issues

open PRs

items grouped

Known?: Yes. 3 related items grouped here, 1 issue already closed.
Fix event: A fix was merged to main in PR #116872. Check it covers your case. No release data is tracked.
Tracker: The maintainers' tracker marks this resolved, deciding PR #116872. That is separate from the fix event.
Still open: Nothing open on GitHub.

Next step: read #116872, then check it covers your case.

Read #116872 Pick up a Lab task

A bug where SSH-mode desktop spawns processes under umask 077, causing terminal-tool commands and sudo to create files with 0600/0700 permissions instead of expected defaults. The fix scopes the umask 077 change to only the mkdir subshell rather than the entire backend process.

Open issues0

No open issues.

Open PRs0

No open pull requests.

Fixes on record

Merged to main. A stamp counts the issues a fix is linked to.

#116872 fix(desktop): SSH-mode backend keeps the login umask, terminal-tool files are no longer 0600/0700 (#115512, salvage #115520)

merged to main

files: apps/desktop/electron/remote-lifecycle.test.ts, apps/desktop/electron/remote-lifecycle.ts

1 PR closed without merging

From the close comments: merged via another change 1

#115520 fix(desktop): scope remote spawn umask 077 to the mkdir subshell · merged via another change → a0caeda, #116872, #115512, #115520

Closed issues · 1

Closed#115512[Bug]: Desktop SSH mode spawns `hermes serve --isolated` under umask 077 — every terminal-tool command (and sudo) creates 0600/0700 files

How this cluster was grouped

Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
Pairwise link density 0.67: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Merged PRs: #116872
Closed issues: 1
Attempts: 1 PR closed without merging
Fix link checked: 20 Sep 2026

For your agent

The same facts, typed.

cluster/115512.json
cluster/115512.md