chore: drop what the icacls removal left behind

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Author: KiaroSama

telegram_mcp/aliases.py

@@ -21,7 +21,6 @@
 import logging
 import os
 import re
-import subprocess
 import tempfile
 import time
 import unicodedata
@@ -32,7 +31,7 @@
 
 import telethon
 
-from telegram_mcp.safe_log import log_event, logger
+from telegram_mcp.safe_log import log_event
 from telegram_mcp.owner_only import restrict_to_owner_strict, verify_owner_only
 from telegram_mcp.settings import _parse_bool_env, state_dir
 from sanitize import sanitize_name
@@ -57,11 +56,6 @@
 _SELF_REFS = {"me", "self"}
 
 
-# icacls is a subprocess; it needs a ceiling like any other. Ten seconds is
-# generous for a local file and short enough that a wedged one is not a hang.
-_ACL_TIMEOUT_SECONDS = 10.0
-
-
 def restrict_to_owner(path: Union[str, Path]) -> bool:
     """Make a file or directory reachable by its owner alone, and prove it.
 

tests/test_session_hardening.py

@@ -239,7 +239,7 @@ def test_a_real_session_database_ends_up_mode_600(tmp_path, monkeypatch):
     assert stat.S_IMODE(directory.stat().st_mode) == 0o700
 
 
-@pytest.mark.skipif(os.name != "nt", reason="the Windows owner-only mechanism is icacls")
+@pytest.mark.skipif(os.name != "nt", reason="POSIX has no DACL to leave a foreign entry on")
 def test_session_hardening_leaves_no_foreign_entry_on_the_object(tmp_path, monkeypatch):
     """Seeds an explicit `Everyone` entry first, because that is the case the
     previous implementation silently failed: it dropped INHERITED entries and