E1301. Cache directory permissions wrong

Severity: ERROR. Reported by controlzero doctor and at SDK startup.

What happened

~/.controlzero needs mode 0700. A different mode was found. Other local users on this machine may be able to read the cached policy bundle, audit buffer, and config.

How to fix

Run chmod 700 ~/.controlzero.

See also

• E1002 -- ~/.controlzero directory is world-readable
• Errors index