ACINQ/phoenixd v0.9.3

on GitHub

What's Changed

• Add support for reading the webhook secret from a file by @Sharmaz in #249
• Restrict permissions of files created by phoenixd by @pm47 in #250 (reported by @iblitzc0de)
  • New files are created with a 077 umask, as Bitcoin Core does.
  • At every startup, the permissions for data directory and its subdirectories are set to 0700 and the files in it to 0600, so existing installs are fixed automatically.
  • If other users or tools (backups, monitoring) need to read the data directory, you'll have to grant that access some other way. If you use --seed-path to keep your seed outside the data directory, run chmod 600 on it yourself.

New Contributors

• @Sharmaz made their first contribution in #249

Full Changelog: v0.9.2...v0.9.3

Verifying signatures

You will need gpg and our release signing key E434ED292E85643A. Note that you can get it:

• from our website: https://acinq.co/pgp/padioupm.asc
• from github user @pm47: https://api.github.com/users/pm47/gpg_keys

To import our signing key:

$ gpg --import padioupm.asc

To verify the release file checksums and signatures:

$ gpg -d SHA256SUMS.asc > SHA256SUMS.stripped
$ sha256sum -c SHA256SUMS.stripped