Change location or access of config file
Open
@julien-nc is already working on this.
Since Dec 17, 2020.
enhancement
feature: integration 📦
- Dominant language
- PHP
- Stars
- 2.2k
- Forks
- 587
- Avg merge
- 18h 27m
- Merged PRs (30d)
- 333
Description
While testing I realized that the .toml config file for matterbridge is created under /tmp. It also seems to be that the default access rights of the web application user were used. Since the config file contains sensible data this seems like a security problem for me.
Wouldn't it be better to put the .toml and .log file somewhere under the data folder of the nextcloud installation? This folder should have better access rights in most environments. Alternatively the matterbridge app should at least make shure that the access rights to the files are as small as possible.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.