New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

use /run/pki rather than /tmp/pki #342

Open

MaxHearnden wants to merge 1 commit into nix-community:master from MaxHearnden:run-pki

MaxHearnden commented May 16, 2024

This prevents another unprivileged user from creating /tmp/pki and sbctl enrolling those keys instead

I would be open to using another directory, however at the moment key enrollment is not secure.


use /run/pki rather than /tmp/pki

0cf7d3c

This prevents another unprivileged user from creating /tmp/pki and sbctl
enrolling those keys instead

Member

nikstur commented May 16, 2024

Key enrollment like this isn't secure at all and you most likely shouldn't do it. This hook really is only useful for testing (in a VM!) right now.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment