Allowed permissions should not be so restrictive
Open
Nobody has claimed this yet.
- Dominant language
- C
- Stars
- 50
- Forks
- 36
- Avg merge
- 3d 22h
- Merged PRs (30d)
- 2
Description
If x509.certificate file mode is not 644 and if x509.private_key is not 600, tlshd won't start.
It should be allowed to define both file in mode 400 if they belong to root user / group.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Locate the validation for the x509.certificate and x509.private_key file modes in tlshd and inspect how ownership is checked. Verify that root-owned files with mode 400 are accepted while the existing certificate and private-key restrictions remain enforced.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- c
- Domain
- security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100