Skip to content

v3.0.0 2015-09-22; separate keychain file, no auto-whitelist.

Latest
Compare
Choose a tag to compare
@pda pda released this 22 Sep 21:49
· 6 commits to master since this release

This release focuses on better Keychain security;

  • Prevent security / aws-keychain from being whitelisted to access Keychain items. #13
  • Store in a separate aws-keychain.keychain instead of the always-unlocked login.keychain. #15
    • Override with AWS_KEYCHAIN_FILE environment variable.
    • aws-keychain migrate moves items from login.keychain to aws-keychain.keychain.

Keychain Access (which ships with Mac OS X) can be used to adjust the auto-lock parameters on the new keychain file. It is recommended that you don't “Always allow” when prompted. You can hit spacebar to allow access when prompted while the keychain is unlocked.