[#3831] Applied kea-ctrl-agent.conf.pre update

diff --git a/src/bin/keactrl/kea-ctrl-agent.conf.pre b/src/bin/keactrl/kea-ctrl-agent.conf.pre
index 79679b2a1e4dd044050bac085ab3ae269a565d32..dda4a0485e571eadfd7ce4b36fc705dfe232ff7d 100644 (file)
--- a/src/bin/keactrl/kea-ctrl-agent.conf.pre
+++ b/src/bin/keactrl/kea-ctrl-agent.conf.pre
@@ -28,6 +28,8 @@
 
     // Allow access only to kea-api user.
     // To make it work, please store your password in kea-api-password file.
+    // Make sure the password file has sufficiently restrictive access
+    // permissions, in particular it is not world-readable.
     // The basic HTTP auth offers poor security for unencrypted channels.
     // If possible, a better, stronger HTTPS mechanism should be deployed,
     // in particular when the client authentication is enabled by setting the