I just configured SSL on my server, and noticed what I think is a bit of a
security risk.
All of the *.pem files are readable by any account, e.g.:
lrwxrwxrwx 1 root qmail 14 Sep 10 10:08 clientcert.pem -> servercert.pem
-rw-r--r-- 1 root qmail 1693 Jun 21 08:21 servercert.pem
Isn't this a bad idea, given that this file in particular contains a private
key?
To fix it, I did:
# cd /var/qmail/control
# chgrp vchkpw *.pem
# chmod o-r *.pem
# rm -f clientcert.pem
# cp -p servercert.pem clientcert.pem
# chgrp qmail clientcert.pem
Is this a non issue, or should it be changed in the basic toaster?
--
-Eric 'shubes'
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
