netinvent/npbackup
1
1
Fork 0
mirror of https://github.com/netinvent/npbackup.git synced 2025-10-09 05:01:13 +08:00
Code Issues Projects Releases Packages Wiki Activity

Add new security related entry

Browse source
This commit is contained in:
deajan 2024-04-21 15:19:14 +02:00
parent 0370975718
commit d7c201a6e2
1 changed files with 6 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
SECURITY.md
View file

@ -44,3 +44,8 @@ Best ways:
Since v3.0.0, we have config inheritance. Showing the actual config helps diag issues, but we need to be careful not Since v3.0.0, we have config inheritance. Showing the actual config helps diag issues, but we need to be careful not
to show actual secrets. to show actual secrets.
# NPF-SEC-00009: Manager password in CLI mode
When using `--show-config --manager-password password`, we should only show unencrypted config if password is set.
Also, when wrong password is entered, we should wait in order to reduce brute force attacks.