On 20/09/2019 13.36, Tomas Krizek wrote:
The /etc/knot-resolver/kresd.conf is only writable by
root (0644), as
well as other files kresd uses in /etc/knot-resolver/ directory,
therefore I don't believe this is an issue from security point of view.
Turns out this is incorrect, since you can actually delete the file and
re-create it with other permissions. That's an oversight on my part. In
any case, we'll fix it.
--
Tomas Krizek
PGP: 4A8B A48C 2AED 933B D495 C509 A1FB A5F7 EF8C 4869