2 ms·
Should touch and chmod files (.msmtprc and /etc/exim4/passwd.client) BEFORE adding sensitive content to them. There might be other instances in the how-to, I d
by emmelaich 1y ago
Should touch and chmod files (.msmtprc and /etc/exim4/passwd.client) BEFORE adding sensitive content to them.
There might be other instances in the how-to, I didn't read it all.
- nh2 1y agoIf there are adversaries on the machine right now that can exploit this order, then touch+chmod is not enough. If somebody opens the file between those two operations, they can still read the file contents written to it later. It only makes a bit harder by shortening that time. Use e.g. a current version of `install` to create files atomically with the correct permissions.