[GH-ISSUE #68] Permissions on key.token should be restricted #58

New issue

Open

opened 2026-03-02 23:02:04 +03:00 by kerem · 0 comments

kerem commented

2026-03-02 23:02:04 +03:00

Owner

Originally created by @bradrf on GitHub (Aug 17, 2022).
Original GitHub issue: https://github.com/agrinman/tunnelto/issues/68

When using set-auth, the key is stored with permissions to be read by the world:

❯ ls -al ~/.tunnelto/key.token 
.rw-rw-r-- brad brad 22 B Wed Aug 17 08:43:14 2022  /home/brad/.tunnelto/key.token

Instead, these should be set to 0600 or similar.

Originally created by @bradrf on GitHub (Aug 17, 2022). Original GitHub issue: https://github.com/agrinman/tunnelto/issues/68 When using `set-auth`, the key is stored with permissions to be read by the world: ```shell ❯ ls -al ~/.tunnelto/key.token .rw-rw-r-- brad brad 22 B Wed Aug 17 08:43:14 2022  /home/brad/.tunnelto/key.token ``` Instead, these should be set to `0600` or similar.