[9fans] why disabled -n option of secstore in plan9port

[9fans] why disabled -n option of secstore in plan9port

[Kyohei Kadota]

[-- Attachment #1: Type: text/plain, Size: 174 bytes --]

Hello fans.

I'm curious why secstore's -n option is disabled.
https://github.com/9fans/plan9port/blob/master/src/cmd/auth/secstore/secstore.c#L390

Does someone know?

[-- Attachment #2: Type: text/html, Size: 370 bytes --]

Re: [9fans] why disabled -n option of secstore in plan9port

[Skip Tavakkolian]

[-- Attachment #1: Type: text/plain, Size: 767 bytes --]

probably because it wouldn't be a secure storage.  p9p is hosted on linux
or macos, and if the keys are stored in a file (or device) on the host os,
then secstore would be only as secure as the host os (e.g. sudo privilege).

readnvram (src/libauthsrv/readnvram.c) expects to find the keys in
locations that are specific to plan9 devices (e.g. '#r/nvram'). unattended
startup of secstore assumes that there is physical access control to the
machine and only the host-owner can access nvram.


On Wed, May 24, 2017 at 8:27 AM Kyohei Kadota <lufia@lufia.org> wrote:

> Hello fans.
>
> I'm curious why secstore's -n option is disabled.
>
> https://github.com/9fans/plan9port/blob/master/src/cmd/auth/secstore/secstore.c#L390
>
> Does someone know?
>

[-- Attachment #2: Type: text/html, Size: 1250 bytes --]