leonjza / tli

Twitter (command) Line Interface
MIT License
4 stars 1 forks source link

Credentials should not be world readable #2

Closed kseistrup closed 8 years ago

kseistrup commented 8 years ago

After the initial setup, the ~/.tli.conf file is left world readable:

$ ls -l ~/.tli.conf
-rw-r--r-- 1 kseistrup kseistrup 286 Feb 23 19:00 /home/kseistrup/.tli.conf
$

The umask should be set to 0077 (or at least 0027) before writing to disk.