umbrel-lightning icon indicating copy to clipboard operation
umbrel-lightning copied to clipboard
verified publisher icon getumbrel

Permissions on state file (keyphrase) too open

Open trekon1701 opened this issue 3 years ago • 1 comments

It appears that permissions on the file used to store the secret phrase to the wallet are too open, allowing access to anyone on a shared system. -rw-r--r-- 1 umbrel umbrel 390 Jun 7 21:21 app-data/lightning/data/lightning/state.json recommend setting them to 0600 to prevent leaks.

Umbrel version 0.5.0

trekon1701 avatar Jun 17 '22 06:06 trekon1701

still the same version now 0.5.4 with full path now days: /home/umbrel/umbrel/app-data/lightning/data/lightning/state.json

tlindi avatar Oct 09 '23 13:10 tlindi