anastasis

Credential backup and recovery protocol and service
Log | Files | Refs | Submodules | README | LICENSE

authorization-file.conf (853B)

      1 [authorization-file]
      2 
      3 # The "file" authorization method writes the challenge code to a file instead
      4 # of sending it anywhere.  It exists for TESTING (and for exercising user
      5 # interfaces such as anastasis-gtk); anyone able to read the file can pass the
      6 # challenge, so do not enable it on a production provider.
      7 
      8 # Set to 'YES' to enable (must then also specify 'COST')
      9 ENABLED = NO
     10 
     11 # Set recovery cost:
     12 # COST =
     13 
     14 # Directory the challenge files are written to.  Nothing outside this
     15 # directory can be written: the file name comes from the (client-supplied)
     16 # truth data, and a name that escapes the directory is refused.
     17 #
     18 # The default is $TMPDIR/anastasis-file-challenges, which is a predictable
     19 # name in a shared directory: on a multi-user host, point this somewhere only
     20 # the provider can read.
     21 # DIRECTORY = /var/lib/anastasis/file-challenges