Subject: Re: /etc/ipsec.conf permissions
To: None <itojun@iijlab.net>
From: Curt Sampson <cjs@cynic.net>
List: tech-security
Date: 04/15/2003 18:41:00
On Tue, 15 Apr 2003 itojun@iijlab.net wrote:

> >I'm not sure if racoon.conf should be "mode=0644", or "mode=0600 tags=nodiff"
>
> 	i guess 644 is ok.

Could racoon be set up in a weak manner, such that knowing how it was
improperly set help an attacker? If so, perhaps we should not expose
this information, to make the attack a bit harder.

cjs
-- 
Curt Sampson  <cjs@cynic.net>   +81 90 7737 2974   http://www.netbsd.org
    Don't you know, in this new Dark Age, we're all light.  --XTC