shaba/systemd
1
0
Fork 0
mirror of https://github.com/systemd/systemd.git synced 2024-12-25 01:34:28 +03:00
Code

network: warn when wireguard keys are stored in world readable files

Browse Source
This commit is contained in:
Yu Watanabe 2019-04-08 03:48:57 +09:00
parent a3945c6361
commit 26f86d500e
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/network/netdev/wireguard.c
View File

@ -494,6 +494,9 @@ static int wireguard_decode_key_and_warn(
return 0; return 0;
} }
if (!streq(lvalue, "PublicKey"))
(void) warn_file_is_world_accessible(filename, NULL, unit, line);
r = unbase64mem_full(rvalue, strlen(rvalue), true, &key, &len); r = unbase64mem_full(rvalue, strlen(rvalue), true, &key, &len);
if (r < 0) { if (r < 0) {
log_syntax(unit, LOG_ERR, filename, line, r, log_syntax(unit, LOG_ERR, filename, line, r,