Package: certbot
Version: 4.0.0-2
Severity: normal

Dear maintainers,

at present the file permissions of the file /etc/letsencrypt/cli.ini
are 0644. As a result any local user can read this file. Since admins 
might add external account binding (EAB) credentials to this file, I
think that more restrictive access rights should be applied.

Best regards

Peter

Reply via email to