[ 
https://ovirt-jira.atlassian.net/browse/OVIRT-1586?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=34643#comment-34643
 ] 

eyal edri commented on OVIRT-1586:
----------------------------------

I disagree, if there is no real use for the UI (php) part, let's just remove 
it, and have resources.ovirt.org point to plain.resources.ovirt.org. 
Anyone who wants to use see the real packages in the repo, can use repoquery 
and not rely on the UI interface.

We've seen cases where OST can fail because of it ( when running the manual job 
) and also a potential security risk like we've had a few years ago, with an 
exploit to the PHP file.



> Make plain http default at resources.ovirt.org
> ----------------------------------------------
>
>                 Key: OVIRT-1586
>                 URL: https://ovirt-jira.atlassian.net/browse/OVIRT-1586
>             Project: oVirt - virtualization made easy
>          Issue Type: Task
>          Components: oVirt Infra
>            Reporter: Daniel Belenky
>            Assignee: infra
>
> To avoid confusion from users of repoman (mostly extra sources in OST, we 
> should consider default resources.ovirt.org as plain http, and redirect the 
> UI to ui.resources.ovirt.org



--
This message was sent by Atlassian JIRA
(v1001.0.0-SNAPSHOT#100058)
_______________________________________________
Infra mailing list
[email protected]
http://lists.ovirt.org/mailman/listinfo/infra

Reply via email to