cmd/go/internal/auth: readNetrc: detect exposed .netrc files #38468
Labels
FeatureRequest
Issues asking for a new feature that does not need a proposal.
GoCommand
cmd/go
NeedsDecision
Feedback is required from experts, contributors, and/or the community before a change can be made.
Security
Milestone
It is a common practice for security-conscious code to return an error when a file holding secret material is not stored safely.
For example, you may have already encountered an ssh error saying a user's private key has unsafe mode. Similarly, the python netrc library throws an exception when file permissions aren't sufficiently narrow.
Go's internal
readNetrc
does not implement such a check as of1.14.1
.The text was updated successfully, but these errors were encountered: