picnoir/Systemd
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

network: warn when wireguard keys are stored in world readable files

Browse source
This commit is contained in:
Yu Watanabe 2019-04-08 03:48:57 +09:00
parent a3945c6361
commit 26f86d500e
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
src/network/netdev/wireguard.c
View file

@ -494,6 +494,9 @@ static int wireguard_decode_key_and_warn(
return 0;
}
if (!streq(lvalue, "PublicKey"))
(void) warn_file_is_world_accessible(filename, NULL, unit, line);
r = unbase64mem_full(rvalue, strlen(rvalue), true, &key, &len);
if (r < 0) {
log_syntax(unit, LOG_ERR, filename, line, r,