Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

backup-auth creates files with insecure permission #194

Open
znz opened this issue Jun 13, 2020 · 3 comments
Open

backup-auth creates files with insecure permission #194

znz opened this issue Jun 13, 2020 · 3 comments

Comments

@znz
Copy link

znz commented Jun 13, 2020

dokku postgres:backup-auth creates world-readable files.
I think AWS_SECRET_ACCESS_KEY should not be world-readable at least.

vagrant@dokku:~$ dokku postgres:backup-auth lolipop MINIO_ACCESS_KEY_ID MINIO_SECRET_ACCESS_KEY us-east-1 s3v4 https://YOURMINIOSERVICE
vagrant@dokku:~$ ls -al /var/lib/dokku/services/postgres/lolipop/backup/
total 28
drwxr-xr-x 2 dokku dokku 4096 Jun 13 09:49 .
drwxr-xr-x 4 dokku dokku 4096 Jun 13 09:49 ..
-rw-r--r-- 1 dokku dokku   20 Jun 13 09:49 AWS_ACCESS_KEY_ID
-rw-r--r-- 1 dokku dokku   10 Jun 13 09:49 AWS_DEFAULT_REGION
-rw-r--r-- 1 dokku dokku   24 Jun 13 09:49 AWS_SECRET_ACCESS_KEY
-rw-r--r-- 1 dokku dokku    5 Jun 13 09:49 AWS_SIGNATURE_VERSION
-rw-r--r-- 1 dokku dokku   25 Jun 13 09:49 ENDPOINT_URL
@josegonzalez
Copy link
Member

What should be the correct permissions on these files?

@Schlepptop
Copy link

This should be resolved by dokku/dokku-postgres#206

@tribela
Copy link

tribela commented Mar 18, 2022

This should be resolved by dokku/dokku-postgres#206

At least 640. o-rw

@josegonzalez josegonzalez transferred this issue from dokku/dokku-postgres Dec 27, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

4 participants