c++ - Secure configuration file in clients -
in project create configuration file each clients(also can sqlite in each clients instead of configuration file). files include critical information policies. therefore end-user musn't add, delete, change configuration file or in file.
i considering use active directory prevent users open folder include configuration file.
is there standart way use secure configuration files?
edit: of course speed of reading file important security
edit2: can't db server because policies must accesible whithout internet connection too. server update file or sqlite tables in periods. , using c++.
i'm sorry crush hopes , dreams, if security based on configuration file on client, you're screwed.
the configuration file loaded , decrypted application , means values can changed using special tools when application runs.
if security important, checks on server, not client.