opnsense-ports/security/lastpass-cli/pkg-message
Franco Fichtner e43cf63f63 */*: sync with upstream
Taken from: HardenedBSD
2017-07-02 05:57:37 +02:00

16 lines
754 B
Text

===============================================================================
Important security considerations
===============================================================================
Before using the 'edit' subcommand interactively, it's recommended to set the
SECURE_TMPDIR environment variable to a location that isn't written to disk,
such as a tmpfs mount, ideally using encrypted swap:
https://www.freebsd.org/doc/handbook/swap-encrypting.html
Also keep in mind your editor may create temporary files and backups in other
locations - consider disabling these features for files matching the pattern
lpass.* or within your $SECURE_TMPDIR. For example, with vim:
autocmd BufRead lpass.* setlocal noundofile nowritebackup noswapfile