Michael Prokop <[email protected]> wrote:
> /etc/apt/sources.list.d/foo.list contains something like:
>
>   deb https://$USER:$PASSWD@$MIRROR internal main
>
> and because of confidential information ($USER/$PASSWD) the file is
> read-only for root (600).

This is not a comment on the reported bug (not quoted here), but a note
about usage.

It is not ideal to include authentication credentials in sources.list.
Those files should be world readable (or atleast readable by all
apt-cache and aptitude users).

There is a poorly documented option to use /etc/apt/auth.conf, which is
formatted like netrc(5).  Credentials should be placed in this file,
with sources.list just containing the $MIRROR part.

Regards

_______________________________________________
Aptitude-devel mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/aptitude-devel

Reply via email to