Your message dated Mon, 29 Aug 2016 00:40:01 +0200
with message-id <20160828224000.6kgtuzqvpoebqfuj@earth>
and subject line wontfix
has caused the Debian Bug report #708127,
regarding tt-rss: Please make it easier to block users from using plugins.
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
708127: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=708127
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: tt-rss
Severity: wishlist
This is a wishlist / would be nice to have.
The plugins for tt-rss are installed into /usr/share/.... by default.
Some of the plugins have the potential to put a lot of extra unexpected load on
the server and so some system administrators with a lot of users might not want
to give user's the choice to enable some of them. I'm especially referring to
the plugin that allows tt-rss user's to publicly share a custom built rss feed
with unlimited number of other users from the Internet.
It would be nice if there was a /etc/tt-rss/plugins.allowed and I could just
add/delete symlinks into that folder that point to the actual plugin files at
/usr/share/....
Instead, I've resorted to manually moving individual user plugin files out of
their installation locations at /usr/share to block users from being able to
choose them, which is a pretty icky solution because they'll come back
everytime the tt-rss package gets updated. Maybe a better solution would be
just to chmod the plugins I don't want user's to have, but it's possible those
chmodded files could get overwritten with the defaults on a package update as
well, right? Plus the added problem that package updates could bring in new
plugins that I might not want user's to have available to them by default.
Maybe there is a better way of doing this, perhaps adding specific lines into
config.php for each plugin along with a description of the plugin? But that
might be overkill / too much work to maintain.
....or perhaps there is a way to do this that tt-rss provides that I'm not aware
of..
-- System Information:
Debian Release: 7.0
APT prefers stable
APT policy: (500, 'stable'), (2, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 3.2.0-4-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages tt-rss depends on:
ii dbconfig-common 1.8.47+nmu1
ii debconf [debconf-2.0] 1.5.49
pn libjs-dojo-core <none>
pn libjs-dojo-dijit <none>
pn libjs-scriptaculous <none>
pn libphp-phpmailer <none>
pn libphp-simplepie <none>
pn php-gettext <none>
ii php5 5.4.4-14
ii php5-cgi 5.4.4-14
ii php5-cli 5.4.4-14
ii php5-pgsql 5.4.4-14
pn phpqrcode <none>
Versions of packages tt-rss recommends:
ii lighttpd [httpd] 1.4.31-4
ii php5-gd 5.4.4-14
Versions of packages tt-rss suggests:
pn php-apc <none>
ii postgresql 9.1+134wheezy3
ii postgresql-client 9.1+134wheezy3
ii postgresql-client-9.1 [postgresql-client] 9.1.9-1
ii postgresql-client-9.2 [postgresql-client] 9.2.4-1
pn sphinxsearch <none>
--- End Message ---
--- Begin Message ---
Hi,
I don't think I will find the time to implement this
feature, so I will close the bug as wontfix. As a
workaround for your system you could configure dpkg
to install only whitelisted plugins. That way you also
avoid any new plugins.
/etc/dpkg/dpkg.cfg.d/99-tt-rss-whitelist
---------------------------------------------------------------------
# blacklist all tt-rss plugins
path-exclude /usr/share/tt-rss/www/plugins/*
# whitelist af_comics
path-include /usr/share/tt-rss/www/plugins/share/*
# whitelist import_export
path-include /usr/share/tt-rss/www/plugins/import_export/*
---------------------------------------------------------------------
-- Sebastian
signature.asc
Description: PGP signature
--- End Message ---
