//go:build !windows

package fileops

import "os"

// CreatePrivateFile reserves an owner-only file before any bytes are written.
func CreatePrivateFile(path string) (*os.File, error) {
	return os.OpenFile(path, os.O_WRONLY|os.O_CREATE|os.O_EXCL, 0600)
}