Bug 264847 - security/vaultwarden: Change file permissions of rc.conf.d/vaultwarden to 0600
Summary: security/vaultwarden: Change file permissions of rc.conf.d/vaultwarden to 0600
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Only Me
Assignee: Michael Reifenberger
URL:
Keywords: needs-qa, security
Depends on:
Blocks:
 
Reported: 2022-06-23 12:37 UTC by Mateusz Piotrowski
Modified: 2022-07-22 00:08 UTC (History)
1 user (show)

See Also:
bugzilla: maintainer-feedback? (mr)

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Mateusz Piotrowski freebsd_committer freebsd_triage 2022-06-23 12:37:35 UTC 
Hi,

Would it make sense to change the default permissions for /usr/local/rc.conf.d/vaultwarden* to 0600 so that the file is not world-readable by default? From what I understand, this file can contain sensitive details like admin tokens and passwords.

If it makes sense to you, I can commit a patch to enforce this behavior.

Thanks!
Comment 1 commit-hook freebsd_committer freebsd_triage 2022-07-15 11:36:48 UTC 
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=77489323af09b8953e6822456779a1aa1afe54dc

commit 77489323af09b8953e6822456779a1aa1afe54dc
Author:     Michael Reifenberger <mr@FreeBSD.org>
AuthorDate: 2022-07-15 11:32:22 +0000
Commit:     Michael Reifenberger <mr@FreeBSD.org>
CommitDate: 2022-07-15 11:32:22 +0000

    security/vaultwarden: Change file permissions of rc.conf.d/vaultwarden

    Change file permissions of rc.conf.d/vaultwarden to 0600
    While at it:
    Update web vault to v2022.6.0

    PR:             264847
    Reported by:    mp@

 security/vaultwarden/Makefile  |  6 ++--
 security/vaultwarden/distinfo  |  6 ++--
 security/vaultwarden/pkg-plist | 63 +++++++++++++++++++++++-------------------
 3 files changed, 40 insertions(+), 35 deletions(-)
Comment 2 Mateusz Piotrowski freebsd_committer freebsd_triage 2022-07-22 00:08:36 UTC 
Great, thanks!