lrstanley / vault-unseal

auto-unseal utility for Hashicorp Vault
MIT License
238 stars 32 forks source link

bug: vault-unseal won't accept read-only config file #18

Closed jweisner closed 2 years ago

jweisner commented 2 years ago

🌧 Describe the problem

A config file set to 0400 results in an error message:

timestamp=2022-08-23T17:21:33.858258175Z level=fatal message="error reading config" environment= error="permissions of \"/etc/vault-unseal.yaml\" are insecure: r--------, please use 0600" version=0.2.2

⛅ Expected behavior

Config file with 0400 permissions is loaded by the program.

🔄 Minimal reproduction

echo '---' > vault-unseal.yaml chmod 0400 vault-unseal.yaml vault-unseal -c vault-unseal.yaml

💠 Version: vault-unseal

0.2.2

🖥 Version: Operating system

linux/alpine

⚙ Additional context

No response

🤝 Requirements

lrstanley commented 2 years ago

v0.2.3 has been released with a fix for this issue.