[
https://issues.apache.org/jira/browse/AMBARI-25390?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Zhiguo Wu updated AMBARI-25390:
-------------------------------
Fix Version/s: 2.8.0
> Ambari is indexing all subdirectories contents under /resources folder via
> API.
> -------------------------------------------------------------------------------
>
> Key: AMBARI-25390
> URL: https://issues.apache.org/jira/browse/AMBARI-25390
> Project: Ambari
> Issue Type: Bug
> Components: ambari-server
> Affects Versions: trunk, 2.7.4
> Reporter: Andrew Onischuk
> Assignee: Andrew Onischuk
> Priority: Critical
> Labels: pull-request-available
> Fix For: 2.8.0, 2.7.5
>
> Time Spent: 1.5h
> Remaining Estimate: 0h
>
> GET /resources gives back the directory content of
> /var/lib/ambari-server/resources. The directory doesn't contain any sensitive
> information, only files which are already visible on github. But it might
> freak out security guys therefore it's best to disable the listing.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
