On Sun, Jan 24, 2016 at 12:10:42PM +0300, Yazeed Fataar wrote:

> Can you recommend a good strategy in securely managing the config and hosts
> files please?

The private keys (those files ending in .priv) should only be readable
by root. When tinc generates the public/private keypairs, it already
ensures the private key file is only reabable by root. The rest of the
files in /etc/tinc can be public, there is no harm in having others read
them. But if you don't want others to access them, you should do:

sudo chmod go= /etc/tinc

-- 
Met vriendelijke groet / with kind regards,
     Guus Sliepen <[email protected]>

Attachment: signature.asc
Description: Digital signature

_______________________________________________
tinc mailing list
[email protected]
http://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc

Reply via email to