The following comment has been added to this issue:
Author: Marcel May
Created: Fri, 20 Aug 2004 2:11 AM
Body:
It is severe as it is a security risk and got me ssh locked out of
the site server (not nice when you do not sit beside the machine).
It is not a major issue if considering that the plugin does perform
its job, if not badly configured with wrong site dir :-)
I propose to set the "failonerror" to true, at least for ssh copying
the stuff to the site. That way, the site deploy will terminate
if something is wrong...
---------------------------------------------------------------------
View this comment:
http://jira.codehaus.org/browse/MPSITE-13?page=comments#action_23278
---------------------------------------------------------------------
View the issue:
http://jira.codehaus.org/browse/MPSITE-13
Here is an overview of the issue:
---------------------------------------------------------------------
Key: MPSITE-13
Summary: SSH deployment can mess up file permissions of home dir
Type: Bug
Status: Unassigned
Priority: Major
Original Estimate: Unknown
Time Spent: Unknown
Remaining: Unknown
Project: maven-site-plugin
Versions:
1.6
Assignee:
Reporter: Marcel May
Created: Thu, 19 Aug 2004 12:26 PM
Updated: Fri, 20 Aug 2004 2:11 AM
Environment: site:sshdeploy on UNIX site.
Description:
site:sshdeploy can mess up home rights if part of the commands fail.
Remote command chain like "...;cd BLA;chmod ..." should be conditionally executed if
the "cd" succeeds. That way, if one command fails the others (like chmod) do not get
executed in the wrong directory.
Can lead to fatal consequences for eg ssh resource dir (.ssh) with wrong
permissions, oops.
---------------------------------------------------------------------
JIRA INFORMATION:
This message is automatically generated by JIRA.
If you think it was sent incorrectly contact one of the administrators:
http://jira.codehaus.org/secure/Administrators.jspa
If you want more information on JIRA, or have a bug to report see:
http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
