--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/bin/dotfile-chmod.sh	Fri Jan 08 09:51:13 2021 -0500
@@ -0,0 +1,18 @@
+#!/bin/bash
+# I wanted this to be a fancy test to see if the files/directories we care
+# about were updated and make sure the permissions are set right, but hg
+# doesn't tell you enough in the update hook since you could be traversing
+# many updates from the current revision to now (unlike commit which gives you
+# the earliest part of the transaction to compare against tip).  So instead
+# we'll just do this on every update, which isn't too costly anyway.
+#
+# Add to .hg/hgrc:
+# [hooks]
+# update = ~/bin/dotfile-chmod.sh
+
+ROOT=`hg root`
+
+chmod -f 700 $ROOT/.ssh $ROOT/.ssh/sockets
+chmod -f 600 $ROOT/.ssh/config
+
+exit 0