SOLVED Export password seed on Update won't ask for Root Password

[Castigo]

Hy!

I noticed that when i run the update process form the GUI and I'm asked to save the configuration file, I'm not asked for my root password when I flag the "export password seed" option, the config download just starts.

Shouldn't that be the case? Is it by design?

Thanks!

 

[Castigo]

Bug Reported on Jira.

 

[Castigo]

The TrueNAS team answered, stating that the whole "password check on the config export" is futile, as it lulls users into a false sense of security.

I respect the Team's opinion, but I'm not sure that removing this extra step is such a great idea. Indeed, one needs to get to the GUI to get the config backup in the first place and, in order to actually exploit that file in any way, there really needs to be a massive chain of f#]@ups on behalf of the admin. Still, I think there should be a password lock on anything that contains private keys or other passwords.

Nonetheless, this post is here simply to provide closure to anyone who wondered about this minor detail. It's fine, move on...