Re: Setting up shared access to gpg on a UNIX server

2014-01-31 Thread NdK
Il 31/01/2014 01:29, DUELL, BOB ha scritto: > A couple folks (Diego and Johannes) mentioned using a smartcard or a > token. I think a smartcard refers to a piece of hardware, but I > don't know what a "token" means. Our server is in a datacenter and > I'm sure I cannot attach any sort of hardwar

RE: Setting up shared access to gpg on a UNIX server

2014-01-30 Thread DUELL, BOB
Hi again, Firstly, as a Windows Outlook user, I've never figured out the correct etiquette on formatting responses to list-server messages, so I'm just going to post a new message without previous references. Taking previous comments to heart, I've altered my "home directory" permissions to re

Re: Setting up shared access to gpg on a UNIX server

2014-01-30 Thread Johannes Zarl
On Thursday 30 January 2014 11:49:47 Peter Lebbing wrote: > If you're trying to achieve by the 744 what I think you're trying to > achieve, namely that users can't change the files, I think you're > mistaken[1]. Look at the following session I just did[2]: > The thing is, you're not allowed to cha

Re: Setting up shared access to gpg on a UNIX server

2014-01-30 Thread Peter Lebbing
On 30/01/14 02:14, DUELL, BOB wrote: > On my server, I created a directory named /opt/app/apps/dbmprod/gpg and set > the permissions to global access (777). > I set the permission on all the files in this directory to allow global > "read" access (744). If you're trying to achieve by the 744 what

Re: Setting up shared access to gpg on a UNIX server

2014-01-29 Thread Daniel Kahn Gillmor
On 01/30/2014 01:59 AM, NdK wrote: > Il 30/01/2014 02:14, DUELL, BOB ha scritto: > >> I will appreciate any and all comments. If there is a "better way" to do >> this, I'd love to learn. > Every user in the group could "leak" the secret key. At least put it > into a smartcard/token connected to

Re: Setting up shared access to gpg on a UNIX server

2014-01-29 Thread NdK
Il 30/01/2014 02:14, DUELL, BOB ha scritto: > I will appreciate any and all comments. If there is a "better way" to do > this, I'd love to learn. Every user in the group could "leak" the secret key. At least put it into a smartcard/token connected to the server: they'll just be able to *use* it.

Setting up shared access to gpg on a UNIX server

2014-01-29 Thread DUELL, BOB
Hi, I'm looking for advice and comments about how I have set up a "shared" environment on our UNIX server for gpg operations. What I have certainly works but I thought I'd ask for any comments, suggestions, or criticism. I have gpg version 1.4.14 installed on my server. I have a large number