search

rh-lab-q / remote-dependency-solving

GNU General Public License v3.0
10 stars 1 forks source link

Security of configuration file. #68

Open jridky opened 9 years ago

jridky commented 9 years ago

Try to think about how to protect data in configuration file from abuse. In configuration file will be (probably) saved even unique id of client, so data stored in the file should not be in plain text, but somehow encoded or encrypted. Find out how is saving of sensitive data solved in fedora.

SimonMatej commented 9 years ago

By encryption part of fedora documentation, GnuPG is used for file based encryption (https://www.gnupg.org/). GnuPG is designed to be used interactively, and not as an API, but there is a library GnuPG Made Easy (GPGME), which should work for us. Another way is using CryptoAPI from linux kernel.