# ~/.gnupg is private: 700, as gpg itself makes it. Something else can make# it first with 755 (a Flatpak with --filesystem=~/.gnupg:create does), and# gpg then warns "unsafe permissions on homedir". systemd-tmpfiles-setup.service# runs this for every user at login: it creates ~/.gnupg as 700 if missing,# and puts an existing one back to 700 (`d` adjusts the mode of what's there).d %h/.gnupg 0700 - - -