#1128569 certbot: cli.ini file should not be readable for all users

Package:
certbot
Source:
certbot
Submitter:
Peter Wienemann
Date:
2026-02-21 10:35:02 UTC
Severity:
normal
#1128569#5
Date:
2026-02-21 10:31:29 UTC
From:
To:
Dear maintainers,

at present the file permissions of the file /etc/letsencrypt/cli.ini
are 0644. As a result any local user can read this file. Since admins
might add external account binding (EAB) credentials to this file, I
think that more restrictive access rights should be applied.

Best regards

Peter