Forked from
Arch Linux / infrastructure
Source project has a limited visibility.
-
Christian Heusel authored
So far every user on the system was able to read the secrets from the world-readable config.json. Move these secret into the systemd service file and limit its read rights to root. fixes: archlinux/infrastructure#562 Co-authored-by:
Jakub Klinkovský <lahwaacz@archlinux.org> Signed-off-by:
Christian Heusel <christian@heusel.eu>
Christian Heusel authoredSo far every user on the system was able to read the secrets from the world-readable config.json. Move these secret into the systemd service file and limit its read rights to root. fixes: archlinux/infrastructure#562 Co-authored-by:
Jakub Klinkovský <lahwaacz@archlinux.org> Signed-off-by:
Christian Heusel <christian@heusel.eu>
Code owners
Assign users and groups as approvers for specific file changes. Learn more.