2009/1/14 Kees Cook <[email protected]>: > Please make sure that the tool that creates the credentials stores them in > a mode 0600 file. The API examples[1] do not mention this, and I think > it's an important bit of protection. > > While playing with lplib for security team work, I took this a step > further and even make the directory unreadable. e.g.:
Absolutely, this change has been pushed as of revision 276. Jonathan -- Ubuntu-motu mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu
