Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

btsync-gui: agent configuration file is world readable #81

Closed
tuxpoldo opened this issue Mar 5, 2014 · 0 comments
Closed

btsync-gui: agent configuration file is world readable #81

tuxpoldo opened this issue Mar 5, 2014 · 0 comments
Assignees
@tuxpoldo
Labels
btsync-gui bug security
Milestone
btsync-gui - Beta...

Comments

@tuxpoldo
Copy link
Owner

tuxpoldo commented Mar 5, 2014

The configuration file for the BitTorrent Sync agent ~/.config/btsync/btsync-agent.conf can be accessed by everyone. Since this file contains sensitive information (API and WebUI credentials), it should be only readable by the user (mode 500).

The security can be additionally improved by deleting it after launching the agent.
@tuxpoldo tuxpoldo added this to the btsync-gui - Beta release milestone Mar 5, 2014
@tuxpoldo tuxpoldo self-assigned this Mar 5, 2014
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@tuxpoldo tuxpoldo

Labels
btsync-gui bug security
Projects
None yet
Milestone
btsync-gui - Beta release
Development

No branches or pull requests
1 participant
@tuxpoldo