I use keepassXC on mac for my password manager. I use the keyfile feature with it, which requires a keepassxc created keyfile to be read in order for the database to be unlocked (veracrypt utilizes the same feature). What I am trying to accomplish is something mildly similar to my .ssh folder protection permissions on Mac OS. I would like to set permissions and ACL’s of the keepassxc keyfile so that the following rules are applied:
The file cannot be read or written to by any entity unless the following conditions are met:
a. The Entity trying to read the file is KeepassXC for Mac OS.
b. The Entity using and running KeepassXC is me (my user) on Mac OS.
The file can not be read or written to by any entity including root, unless the above conditions are met.
Does anyone who understands permissions and ACL’s know how I could accomplish something like this?