We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
dokku postgres:backup-auth creates world-readable files. I think AWS_SECRET_ACCESS_KEY should not be world-readable at least.
dokku postgres:backup-auth
AWS_SECRET_ACCESS_KEY
vagrant@dokku:~$ dokku postgres:backup-auth lolipop MINIO_ACCESS_KEY_ID MINIO_SECRET_ACCESS_KEY us-east-1 s3v4 https://YOURMINIOSERVICE vagrant@dokku:~$ ls -al /var/lib/dokku/services/postgres/lolipop/backup/ total 28 drwxr-xr-x 2 dokku dokku 4096 Jun 13 09:49 . drwxr-xr-x 4 dokku dokku 4096 Jun 13 09:49 .. -rw-r--r-- 1 dokku dokku 20 Jun 13 09:49 AWS_ACCESS_KEY_ID -rw-r--r-- 1 dokku dokku 10 Jun 13 09:49 AWS_DEFAULT_REGION -rw-r--r-- 1 dokku dokku 24 Jun 13 09:49 AWS_SECRET_ACCESS_KEY -rw-r--r-- 1 dokku dokku 5 Jun 13 09:49 AWS_SIGNATURE_VERSION -rw-r--r-- 1 dokku dokku 25 Jun 13 09:49 ENDPOINT_URL
The text was updated successfully, but these errors were encountered:
What should be the correct permissions on these files?
Sorry, something went wrong.
This should be resolved by dokku/dokku-postgres#206
At least 640. o-rw
No branches or pull requests
dokku postgres:backup-auth
creates world-readable files.I think
AWS_SECRET_ACCESS_KEY
should not be world-readable at least.The text was updated successfully, but these errors were encountered: