tahoe-lafs/trac-2024-07-25
2
0
Issues 1.1k Wiki Activity

remove two fixed security issues 

[Imported from Trac: page Security, version 14]
zooko 2008-01-09 02:23:44 +00:00
parent 771b5c1c4f
commit 328c11d0ac
1 changed files with 1 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
Security.md

@ -6,16 +6,7 @@ issues that might have security consequences.
# Current Known Security Issues in Tahoe
as of December 17, 2007
* privilege escalation for directory servers
In the v0.6.1 release of Tahoe, it was intended and documented that you could grant read authority, read/write authority, or no authority to any person. We overlooked the fact that the limitation on write authority does not apply to people who control the directory server on which your encrypted directory resides. If you grant read-authority to such a person, they automatically get read-write authority.
The next version of Tahoe, v0.7.0, which will be released soon, fixes this issue by using more powerful cryptography. In Tahoe v0.7.0 you can grant read authority, read/write authority, or no authority to any person and they are unable to get more authority than you've granted them, even if they control some of the servers on which your encrypted files and directories reside.
* temporary exposure to local attacker
In the v0.6.1 release of Tahoe, there was a short window of opportunity in which a local user on your system could read secrets out of the ~/.tahoe directory after they were written into that directory but before their permissions were set to be not-world-readable. This would be prevented on unix-like systems if you set permissions on your home directory or on the .tahoe directory so that others could not read the contents of files within it. In the upcoming v0.7.0 release of Tahoe such secrets are kept in a subdirectory of the ~/.tahoe directory, named ~/.tahoe/private, which is set so that users other than its owner cannot read data from files within it.
as of January 8, 2008
* potential exposure of a file through embedded hyperlinks or JavaScript in that file