Skip to content

Option to store cybr-cli config in keychain/keyring/cred mgr #139

Open
@infamousjoeg

Description

@infamousjoeg

Is your feature request related to a problem? Please describe.
The problem can be that storing config on the local filesystem can be vulnerable. Session tokens are stored in it for Privilege. A conjur.conf and .netrc are created for Conjur.

Describe the solution you'd like
Placing this information inside a secured store can help to reduce the potential attack surface for a developer or operator. Mac OSX Keychain, Linux Keyring, Windows Credential Manager, with extensibility possibilities to other 3rd party tools such as Conjur, wincred, and more.

Describe alternatives you've considered
An attempt was made to create the config as a binary that is only readable by the CLI client, however this can still be de-obfuscated and is just security through obscurity.

Metadata

Metadata

Assignees

Labels

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions