Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

Why does the GridShib CA care about the umask?

April 26, 2017ca gridshib umask

0

10 Posted

Why does the GridShib CA care about the umask?

1 Answer

0

10 Posted

When your web browser launches the Java Web Start file used by the GridShib CA to download your credentials, the browser writes a file to the temporary directory used by Java Web Start. This file contains a secret value (detail: the Shibboleth session id) used by the Java Web Start application. If your umask is set insecurely this temporary file could be read by other users on your system and used to impersonate you and get a copy of your Grid credential from the GridShib CA.