* [9fans] why disabled -n option of secstore in plan9port @ 2017-05-24 15:26 Kyohei Kadota 2017-05-24 17:03 ` Skip Tavakkolian 0 siblings, 1 reply; 2+ messages in thread From: Kyohei Kadota @ 2017-05-24 15:26 UTC (permalink / raw) To: 9fans [-- Attachment #1: Type: text/plain, Size: 174 bytes --] Hello fans. I'm curious why secstore's -n option is disabled. https://github.com/9fans/plan9port/blob/master/src/cmd/auth/secstore/secstore.c#L390 Does someone know? [-- Attachment #2: Type: text/html, Size: 370 bytes --] ^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: [9fans] why disabled -n option of secstore in plan9port 2017-05-24 15:26 [9fans] why disabled -n option of secstore in plan9port Kyohei Kadota @ 2017-05-24 17:03 ` Skip Tavakkolian 0 siblings, 0 replies; 2+ messages in thread From: Skip Tavakkolian @ 2017-05-24 17:03 UTC (permalink / raw) To: Fans of the OS Plan 9 from Bell Labs [-- Attachment #1: Type: text/plain, Size: 767 bytes --] probably because it wouldn't be a secure storage. p9p is hosted on linux or macos, and if the keys are stored in a file (or device) on the host os, then secstore would be only as secure as the host os (e.g. sudo privilege). readnvram (src/libauthsrv/readnvram.c) expects to find the keys in locations that are specific to plan9 devices (e.g. '#r/nvram'). unattended startup of secstore assumes that there is physical access control to the machine and only the host-owner can access nvram. On Wed, May 24, 2017 at 8:27 AM Kyohei Kadota <lufia@lufia.org> wrote: > Hello fans. > > I'm curious why secstore's -n option is disabled. > > https://github.com/9fans/plan9port/blob/master/src/cmd/auth/secstore/secstore.c#L390 > > Does someone know? > [-- Attachment #2: Type: text/html, Size: 1250 bytes --] ^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2017-05-24 17:03 UTC | newest] Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed) -- links below jump to the message on this page -- 2017-05-24 15:26 [9fans] why disabled -n option of secstore in plan9port Kyohei Kadota 2017-05-24 17:03 ` Skip Tavakkolian
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox; as well as URLs for NNTP newsgroup(s).