Bug#902831: wireguard-tools: /etc/wireguard permissions are open to the world, leaking private keys

2018-07-31 Thread Daniel Kahn Gillmor
Hi Mike-- On Sun 2018-07-01 13:16:56 -0700, Mike Swanson wrote: > When installing wireguard-tools, the /etc/wireguard directory is created > that can contain configuration files for the wg-quick service to use. > > These configuration files will contain the private key of the local > machine for

Bug#902831: wireguard-tools: /etc/wireguard permissions are open to the world, leaking private keys

2018-07-01 Thread Mike Swanson
Package: wireguard-tools Version: 0.0.20180625-1 Severity: normal When installing wireguard-tools, the /etc/wireguard directory is created that can contain configuration files for the wg-quick service to use. These configuration files will contain the private key of the local machine for the VPN