[ 
https://issues.apache.org/jira/browse/KARAF-6405?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16935735#comment-16935735
 ] 

Jean-Baptiste Onofré commented on KARAF-6405:
---------------------------------------------

[~coheigea] I think we should keep as it is and just document it in a security 
section of the user guide. Karaf is a container, and the admin just has to be 
careful about what it's deployed. It's the same as if you give permission on a 
OS.  I agree with [~j3rem1e] about trusting what is deployed, and also in the 
admin who's defining the user who's running Karaf (and so the permission).

> Make sure Config files are jailed to the container etc directory
> ----------------------------------------------------------------
>
>                 Key: KARAF-6405
>                 URL: https://issues.apache.org/jira/browse/KARAF-6405
>             Project: Karaf
>          Issue Type: Bug
>          Components: karaf
>            Reporter: Colm O hEigeartaigh
>            Assignee: Jean-Baptiste Onofré
>            Priority: Major
>
> Make sure that Config file names are jailed to the container.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to