Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Restrict clipboard history file permisions #131

Closed
wants to merge 2 commits into from

Conversation

aliask
Copy link

@aliask aliask commented May 19, 2024

The default permissions on file creation leaves it open to be read by anyone, which is probably not wanted as this likely contains sensitive info.

The default permissions on file creation leaves it open to be read by anyone, which is probably not wanted as this likely contains sensitive info.
@ManuelSchneid3r
Copy link
Member

Does this make sense? Shouldn't your home dir be r 700 anyway?

@ManuelSchneid3r
Copy link
Member

Or rather the entire Albert config dir if we want to make sure that it is safe even if users forgot to set 700

@aliask
Copy link
Author

aliask commented May 21, 2024

I think I got a bit ahead of myself - of course you're right, everything under ~ and ~/.config should be 700 already.

But I think it's still a worthwhile tweak considering the sorts of things that people copy & paste - SSH keys are still 600 inside ~/.ssh for example.

@ManuelSchneid3r
Copy link
Member

ManuelSchneid3r commented Jun 25, 2024

in 0.24 the core app will take care of making all app dirs users only

ManuelSchneid3r added a commit to albertlauncher/albert that referenced this pull request Jun 25, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

2 participants