justanotheruser has quit [Ping timeout: 268 seconds]
tilpner has quit [Quit: tilpner]
tilpner has joined #nixos-security
alexbakker has quit [*.net *.split]
spacekookie has quit [*.net *.split]
Foxboron has quit [*.net *.split]
Foxboron has joined #nixos-security
spacekookie has joined #nixos-security
alexbakker has joined #nixos-security
ckauhaus has joined #nixos-security
hmpffff has joined #nixos-security
hmpffff_ has joined #nixos-security
hmpffff has quit [Ping timeout: 276 seconds]
samueldr has quit [*.net *.split]
samueldr has joined #nixos-security
samueldr has quit [*.net *.split]
samueldr has joined #nixos-security
Bruno[m]1 has joined #nixos-security
<Bruno[m]1>
I have a dumb question. Is it a security issue if a backup generates a file with world readable permissions? The user has to create the parent directory, which shouldn't be world readable but the user might forget to set it.
<ckauhaus>
Bruno[m]1: Don't think so
<ckauhaus>
managing permissions is generally up to the usre
<gchristensen>
Bruno[m]1: can you describe more?
<Bruno[m]1>
ckauhaus: thanks
<gchristensen>
I disagree fwiw, so I'd like to know more about the context
<gchristensen>
things should fail safe
<ckauhaus>
heh
<Bruno[m]1>
gchristensen: if I set `services.bitwarden_rs = /opt/bitwarden-backup`, /opt/bitwarden-backup will contain a backup of the sqlite database which is world readable. the password in that databse will be encrypted but there's still private keys in there (which are most likely protected with the users' passwords).