Skip to content

Config file written insecurely #13

@heph

Description

@heph

The livetail-cli config file is written as $(pwd)/config.json in plain-text with world-readable permissions (644). This has several problems.

  1. Using the current directory instead of expanding $HOME or ~ means the same config file cannot be reused when the user changes their directory, and is likely to result in multiple copies of sensitive credentials strewn all over the user's filesystem.
  2. The file should be explicitly set mode 0600 when written.
  3. The config file should be a "dot" file (.config.json)
  4. The config file should be called something more explicit to avoid clobbering non-livetail-cli config files (e.g. ~/.sumo-livetail)

Also you should support #9 so the user doesn't need to risk storing sensitive credentials on their filesystem in the first place if they have a better option.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions