You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
revaultd is creating a directory (the "datadir") and some files (the database, the UNIX domain socket for RPC) on the host OS. We want to setup some basic OS permissions on these files (why would another user get allowed to modify our database, or use our RPC socket?). These permissions are set up at creation time in different places:
However, they are only currently setup for UNIX systems, and Windows is special-cased to setup no particular restrictions. We need to setup some permissions also on Windows, but first we need to figure out how :)
Some guidance on this issue:
It seems that the equivalent of permissions under Windows is to use ACLs. Maybe the stdlib has some way of abstracting it. Please don't introduce new dependencies just for this :).
To decode the UNIX permissions set in the links above, we want rw only for the owner of the file for the database and the RPC and rwx (still only for the owner) for the data directory.
The text was updated successfully, but these errors were encountered:
revaultd
is creating a directory (the "datadir") and some files (the database, the UNIX domain socket for RPC) on the host OS. We want to setup some basic OS permissions on these files (why would another user get allowed to modify our database, or use our RPC socket?). These permissions are set up at creation time in different places:However, they are only currently setup for UNIX systems, and Windows is special-cased to setup no particular restrictions. We need to setup some permissions also on Windows, but first we need to figure out how :)
Some guidance on this issue:
rw
only for the owner of the file for the database and the RPC andrwx
(still only for the owner) for the data directory.The text was updated successfully, but these errors were encountered: