/etc/xcat/cfgloc stores postgres password in plain text

[abhishek-sa1]

/etc/xcat/cfgloc stores postgres password in plain text. Can we encrypt this?

@samveen

[Obihoernchen]

No I don't think so.
It's similar to a passwordless private SSH key or /etc/slurm/slurmdbd.conf.
You need it unencrypted to use it. You need to make sure it's only readable by root though.

[samveen]

@abhishek-sa1 As mentioned by @Obihoernchen to ensure some level of access security, run the following:

$ sudo chown root:root /etc/xcat/cfgloc
$ sudo chmod 0400 /etc/xcat/cfgloc