Michael Prokop <m...@debian.org> wrote:
> /etc/apt/sources.list.d/foo.list contains something like:
>
>   deb https://$USER:$PASSWD@$MIRROR internal main
>
> and because of confidential information ($USER/$PASSWD) the file is
> read-only for root (600).

This is not a comment on the reported bug (not quoted here), but a note
about usage.

It is not ideal to include authentication credentials in sources.list.
Those files should be world readable (or atleast readable by all
apt-cache and aptitude users).

There is a poorly documented option to use /etc/apt/auth.conf, which is
formatted like netrc(5).  Credentials should be placed in this file,
with sources.list just containing the $MIRROR part.

Regards


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to