Package: nut-monitor
Version: 2.7.2-1.1
Severity: normal

After discovering how to save and use Favorites with NUT-Monitor (see
#777680 for the steps I performed), I wanted to know how and where
NUT-Monitor stored its configuration.

I found the configuration in ~/.nut-monitor/favorites.ini and was
surprised to find both the file and the directory it is in were
apparently created with my umask=0022 applied, (which is not an
uncommon setting,) i.e. the directory ~/.nut-monitor was mode 755 and
the file ~/.nut-monitor/favorites.ini was mode 644.

Because this file may contain crypted passwords if authentication was
enabled, permissions on the file should be more restrictive.

I manually corrected this with:

$ chmod 700 ~/.nut-monitor
$ chmod 600 ~/.nut-monitor/favorites.ini

Please ensure NUT-Monitor adequately protects the password from prying
eyes, either restricting access to the directory, or the file, or
both, as you see fit.

Thanks,
Ben


-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to