{"repo":"NousResearch/hermes-agent","public_id":"115512","display_label":"SSH desktop mode umask 077 causes restrictive file permissions","summary":"A bug where SSH-mode desktop spawns processes under umask 077, causing terminal-tool commands and sudo to create files with 0600/0700 permissions instead of expected defaults. The fix scopes the umask 077 change to only the mkdir subshell rather than the entire backend process.","subsystem":null,"counts":{"members":3,"open_issues":0,"open_issues_distinct":0,"open_prs":0,"closed_issues":1,"merged_prs":1,"attempt_prs":1},"landed_fix":{"status":"merged_to_main","basis":"structural","pr":116872,"merged_at":"2026-09-20T18:28:51+00:00"},"resolution":{"state":"resolved","by":"pr-116872"},"freshness":{"state":"verified","last_verified_at":"2026-09-20T18:28:51+00:00","is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.6666666666666666},"fix_edges":[{"issue_number":115512,"pr_number":116872,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true,"pr_merged_at":"2026-09-20T18:28:51+00:00"}],"members":[{"kind":"issue","number":115512,"title":"[Bug]: Desktop SSH mode spawns `hermes serve --isolated` under umask 077 — every terminal-tool command (and sudo) creates 0600/0700 files","url":null,"state":"closed"},{"kind":"pr","number":115520,"title":"fix(desktop): scope remote spawn umask 077 to the mkdir subshell","url":null,"state":"closed","close_reason":{"refs":[{"kind":"commit","value":"a0caeda3ada6","number":0},{"kind":"pr","value":"#116872","number":116872},{"kind":"pr","value":"#115512","number":115512},{"kind":"pr","value":"#115520","number":115520}],"category":"merged_via","implication":"superseded"},"merged":false},{"kind":"pr","number":116872,"title":"fix(desktop): SSH-mode backend keeps the login umask, terminal-tool files are no longer 0600/0700 (#115512, salvage #115520)","url":null,"state":"merged","close_reason":{"category":"merged"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":["apps/desktop/electron/remote-lifecycle.test.ts","apps/desktop/electron/remote-lifecycle.ts"]}],"trust":{"default_tier":"verified","includes_suggested":false}}