Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Option to store cybr-cli config in keychain/keyring/cred mgr #139

Open
infamousjoeg opened this issue Dec 23, 2021 · 0 comments
Open

Option to store cybr-cli config in keychain/keyring/cred mgr #139

infamousjoeg opened this issue Dec 23, 2021 · 0 comments
Assignees
Labels
enhancement New feature or request good first issue Good for newcomers

Comments

@infamousjoeg
Copy link
Owner

Is your feature request related to a problem? Please describe.
The problem can be that storing config on the local filesystem can be vulnerable. Session tokens are stored in it for Privilege. A conjur.conf and .netrc are created for Conjur.

Describe the solution you'd like
Placing this information inside a secured store can help to reduce the potential attack surface for a developer or operator. Mac OSX Keychain, Linux Keyring, Windows Credential Manager, with extensibility possibilities to other 3rd party tools such as Conjur, wincred, and more.

Describe alternatives you've considered
An attempt was made to create the config as a binary that is only readable by the CLI client, however this can still be de-obfuscated and is just security through obscurity.

@infamousjoeg infamousjoeg added enhancement New feature or request good first issue Good for newcomers labels Dec 23, 2021
@infamousjoeg infamousjoeg self-assigned this Feb 27, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request good first issue Good for newcomers
Projects
None yet
Development

No branches or pull requests

1 participant