Package: dkim-filter
Version: 2.6.0.dfsg-1
Severity: normal

Given the fact that the configuration files are relevant to the overall
security of the system, I think it would be best to have a separate
directory for all configuration files to reduce the risk of sensitive
data leaking.

Also if multiple domains and multiple selectors are being used then the number
of configuration files can grow large, having a separate directory
avoids confusion.

Finally when using SE Linux to control access to configuration files it
is impossible to guess every possible name that a sysadmin might decide
to use for a key file.  But if they are all under a directory such as
/etc/dkim then we can label the directory and all files that it
contains.



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to