-
Notifications
You must be signed in to change notification settings - Fork 12
Open
Description
The livetail-cli config file is written as $(pwd)/config.json in plain-text with world-readable permissions (644). This has several problems.
- Using the current directory instead of expanding
$HOMEor~means the same config file cannot be reused when the user changes their directory, and is likely to result in multiple copies of sensitive credentials strewn all over the user's filesystem. - The file should be explicitly set mode
0600when written. - The config file should be a "dot" file (
.config.json) - The config file should be called something more explicit to avoid clobbering non-livetail-cli config files (e.g.
~/.sumo-livetail)
Also you should support #9 so the user doesn't need to risk storing sensitive credentials on their filesystem in the first place if they have a better option.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels