search

NDAR / nda-tools

Python package for interacting with NDA web services. Used to validate, submit, and download data to and from NDA.
MIT License
48 stars 22 forks source link

nda-tools should adjust permissions to prevent passwd leakage from ~/.NDATools/settings.cfg #20

Closed yarikoptic closed 8 months ago

yarikoptic commented 4 years ago

On the systems with default umask of 022, this config file will be created world-readable. nda-tools should chmod it to 600 if they are creating it

jbteves commented 4 years ago

Passwords should not be stored in plain text at all! Please force users to re-authenticate per session or use a public/private key pair as with git.

gregmagdits commented 8 months ago

password storage is delegated to keepass python library. closing