Package: strongswan-starter
Version: 4.4.1-5
Severity: wishlist

Hi.

At least /etc/ipsec.d/private should be created in mode 700. It contains
private keys, and even if those should also be root-accessible only, it doesn't
harm to lock the directory, too.

I guess the other dirs in /etc/ipsec.d/ are not sensitive, not sure about 
however
./reqs.

Cheers,
Chris.



-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to