Corporate use of gnupg

Alexander W. Janssen yalla at fsfe.org
Tue Feb 26 17:07:59 CET 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Andrew Berg wrote:
> Why can't they take away write privileges of gpg.conf (and the gpg
> executables for that matter) from normal users? AFAIK, that would be
> pretty simple (at least on a *nix system).

You'd need to take away write-rights from the directory where gpg.conf
resides - but that also would prevent the user of filling his or her
keyring. All those files are in ~/.gnupg after all...

You could probably put up all files in different directories and tell
gnupg to use the files from certain locations.
Or chown() the gnupg.conf to some other user. Not sure if gpg will read
the file then though.

Alex.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)

iQCVAwUBR8Q5XRYlVVSQ3uFxAQKBOwQAwPSSQEejvXoOcNOlKQpMXNR8sc59R/xc
Wys10rqzf1SljK+vSj95hOc06yQOh0ox0vwqoGjVPPtDbmHJDroN3Juunnrk6DwY
AaIsXHn8ea2/snAn8mMXdXQzNqDqVKFE7Um4OJXLcDDVXjD2V+GXrFFVmOKaxgCB
Qv2mJi+InEE=
=7iFo
-----END PGP SIGNATURE-----



More information about the Gnupg-users mailing list