Re: [OT] /etc/machine-id "must not be exposed in untrusted environments"

To: debian-devel@lists.debian.org
Subject: Re: [OT] /etc/machine-id "must not be exposed in untrusted environments"
From: Jonathan Carter <jcc@debian.org>
Date: Thu, 8 Aug 2019 23:38:56 +0200
Message-id: <[🔎] 7339acbf-c4af-a9c7-de62-0f72d8fa3fed@debian.org>
In-reply-to: <[🔎] 87pnlfs6nu.fsf@turtle.gmx.de>
References: <[🔎] 20190808192028.vu2hwb7rmt7eiiw2@basil.wdw> <[🔎] 87pnlfs6nu.fsf@turtle.gmx.de>

On 2019/08/08 23:12, Sven Joachim wrote:
>> The man page for machine-id says:
>>
>>   This ID uniquely identifies the host. It should be considered
>>   "confidential", and must not be exposed in untrusted environments, in
>>   particular on the network.
>>
>> Why is the file mode 0666?
> 0644, not 0666.

444 even (original post gave me a fright so I checked).

-Jonathan

-- 
  ⢀⣴⠾⠻⢶⣦⠀  Jonathan Carter (highvoltage) <jcc>
  ⣾⠁⢠⠒⠀⣿⡁  Debian Developer - https://wiki.debian.org/highvoltage
  ⢿⡄⠘⠷⠚⠋   https://debian.org | https://jonathancarter.org
  ⠈⠳⣄⠀⠀⠀⠀  Be Bold. Be brave. Debian has got your back.

Reply to:

References:
- [OT] /etc/machine-id "must not be exposed in untrusted environments"
  - From: Marvin Renich <mrvn@renich.org>
- Re: [OT] /etc/machine-id "must not be exposed in untrusted environments"
  - From: Sven Joachim <svenjoac@gmx.de>

Prev by Date: Bug#934266: ITP: whawty-auth -- simple file based authentication suite
Next by Date: Re: Generating new IDs for cloning (was Re: duplicate popularity-contest ID)
Previous by thread: Re: [OT] /etc/machine-id "must not be exposed in untrusted environments"
Next by thread: Re: [OT] /etc/machine-id "must not be exposed in untrusted environments"
Index(es):
- Date
- Thread