netinvent/npbackup
1
1
Fork 0
mirror of https://github.com/netinvent/npbackup.git synced 2024-09-20 14:56:14 +08:00
Code Issues Packages Projects Releases Wiki Activity

Add new security related entry

Browse source
This commit is contained in:
deajan 2024-04-21 15:19:14 +02:00
parent 0370975718
commit d7c201a6e2
1 changed files with 6 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
SECURITY.md
View file

@ -44,3 +44,8 @@ Best ways:
Since v3.0.0, we have config inheritance. Showing the actual config helps diag issues, but we need to be careful not
to show actual secrets.
# NPF-SEC-00009: Manager password in CLI mode
When using `--show-config --manager-password password`, we should only show unencrypted config if password is set.
Also, when wrong password is entered, we should wait in order to reduce brute force attacks.