From 135ed8d4b7065d878e99573898f0bbc5c4dcdc6d Mon Sep 17 00:00:00 2001 From: Tim Byrne Date: Fri, 17 Jul 2015 02:29:20 -0500 Subject: [PATCH] Add recommendation for using a private repository --- yadm.1 | 3 +++ yadm.md | 8 +++++--- 2 files changed, 8 insertions(+), 3 deletions(-) diff --git a/yadm.1 b/yadm.1 index 81acff1..abd9ce8 100644 --- a/yadm.1 +++ b/yadm.1 @@ -336,6 +336,9 @@ and provide the correct password. After files are decrypted, permissions are automatically updated as described in the PERMISSIONS section. +.BR NOTE : +It is recommended that you keep confidential files in a private repository, +even though they are encrypted. .SH PERMISSIONS When files are checked out of a Git repository, their initial permissions are dependent upon the user's umask. This can result in confidential files with lax permissions. diff --git a/yadm.md b/yadm.md index 2a32212..2754f03 100644 --- a/yadm.md +++ b/yadm.md @@ -214,14 +214,16 @@ provide the correct password. After files are decrypted, permissions are automatically updated as described in the PERMISSIONS section. + NOTE: It is recommended that you keep confidential files in a private + repository, even though they are encrypted. ## PERMISSIONS - When files are checked out of a Git repository, their initial permis- + When files are checked out of a Git repository, their initial permis- sions are dependent upon the user's umask. This can result in confiden- tial files with lax permissions. To prevent this, yadm will automatically update the permissions of con- - fidential files. The "group" and "others" permissions will be removed + fidential files. The "group" and "others" permissions will be removed from the following files: - $HOME/.yadm/files.gpg @@ -231,7 +233,7 @@ - The SSH directory and files, .ssh/* yadm will automatically update permissions by default. This can be dis- - abled using the yadm.auto-perms configuration. Even if disabled, per- + abled using the yadm.auto-perms configuration. Even if disabled, per- missions can be manually updated by running yadm perms. The SSH direc- tory processing can be disabled using the yadm.ssh-perms configuration.